EnHookWindow
UnHookWindow
f45678912000
Static task
static1
Behavioral task
behavioral1
Sample
000010a2299064694e98676a776d4cbd_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
000010a2299064694e98676a776d4cbd_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
000010a2299064694e98676a776d4cbd_JaffaCakes118
Size
23KB
MD5
000010a2299064694e98676a776d4cbd
SHA1
2aa822b077ddf6f5cb935ee751a19e376cfcf65b
SHA256
cce85703b7e2f19b48423787dfa780d94beecde5fa3deace098151147e3ea60a
SHA512
275b58581ef87f88e83e2a6af86470235cf60cc8de8f226676c0477bac2e1b146ef8e13d18d95900598a75d8e7dc6f74a139aeb854e6e776c560c96a0446f4f3
SSDEEP
384:EidD9d6GAKuQBrIV5pO3bbZw8hPjhU9EXLCzEN8o/C7i3q:RWyiwpw8hbhUjENXra
Checks for missing Authenticode signature.
resource |
---|
000010a2299064694e98676a776d4cbd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
UnHookWindow
f45678912000
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ