EnHookWindow
UnHookWindow
fs448547aaaa
Static task
static1
Behavioral task
behavioral1
Sample
00007fa1fa5d7bf9807eea1ce0eccc72_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
00007fa1fa5d7bf9807eea1ce0eccc72_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
00007fa1fa5d7bf9807eea1ce0eccc72_JaffaCakes118
Size
23KB
MD5
00007fa1fa5d7bf9807eea1ce0eccc72
SHA1
94c8e1a474eed6f34804a2f0146a6673885081a5
SHA256
791c4428788cc3e59a50770571cc270ff8ef243101e0fd589d29d4d572fcca99
SHA512
58d52d8cbdf40ef609acb3b660be0ea5ba69e0b3d3ad5f4385a4bb0074a405e574d19b899c96b606078a28ba60434a545a8152f3aedcfeac638a92de267c9fbb
SSDEEP
384:bPyZNjtU2mC45TTbrcH+tteHyd8j9VrFxEfAwKUzEFq5VDl:DyZDKYHKzdM9hF4K0EFq5Vp
Checks for missing Authenticode signature.
resource |
---|
00007fa1fa5d7bf9807eea1ce0eccc72_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
UnHookWindow
fs448547aaaa
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ