EnHookWindow
SkipFif45all
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
000049f92b87d7d90deb762ee6dc477a_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
000049f92b87d7d90deb762ee6dc477a_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
000049f92b87d7d90deb762ee6dc477a_JaffaCakes118
Size
22KB
MD5
000049f92b87d7d90deb762ee6dc477a
SHA1
1eb6c799d11a58e309e540094f9a42e6afb9846d
SHA256
7494bfe535639ad674da33bb8d81d47ab0965a4707ae787bb7d3221ed4245717
SHA512
5db42d3f8f33d1fa7534dd2416349db639b72b9b02a38f870898d32dcb1e547f93fc69cc42a7621a3295c28c8a3401250af70dfdce643f6b20c3ee257a56d941
SSDEEP
384:6cPyZNjtU2mmQgAL4Dy43NH051KSjjEE/7u/zXZTDzwl4Q:nyZur4B92KYEETuLXZTDu
Checks for missing Authenticode signature.
resource |
---|
000049f92b87d7d90deb762ee6dc477a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFif45all
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ