EnHookWindow
Skif4freW4ll
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
00001fda4ba1d6f5e95e827fb0a5ac91_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
00001fda4ba1d6f5e95e827fb0a5ac91_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
00001fda4ba1d6f5e95e827fb0a5ac91_JaffaCakes118
Size
19KB
MD5
00001fda4ba1d6f5e95e827fb0a5ac91
SHA1
8eda60913fe52d47712a893e31f6f671b67deee1
SHA256
75cd08b9c89ea5145cf6979168ce6bbf1b303586fac0cb6f968ddbd9d1c99250
SHA512
d64439cfb589a18e8e7189e11e6e6662ca64314d5717666382537b8e81f2a93aff85ccb264084461bd40f1ff2f1c226de91bc1a36cdea68ce915763056948f50
SSDEEP
384:LOr5NKZ2S8ANHN+MxzBHEZG8uR5pHEkBW8Vj59izEvkYYOv32:ir5NjZ9uq0W8RqEvSq2
Checks for missing Authenticode signature.
resource |
---|
00001fda4ba1d6f5e95e827fb0a5ac91_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
Skif4freW4ll
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ