EnHookWindowB
GetTickCountA
Static task
static1
Behavioral task
behavioral1
Sample
001f7345094f2bc1c82ea95c4b3f329d_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
001f7345094f2bc1c82ea95c4b3f329d_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
001f7345094f2bc1c82ea95c4b3f329d_JaffaCakes118
Size
515KB
MD5
001f7345094f2bc1c82ea95c4b3f329d
SHA1
dcdeacaa4e0bfab0d68e929a4c9bd9f97501a56f
SHA256
9ffd7f84c8d9839c7a4aa0bbc9bc3b6a6e8f7a49506249b82490ac5f5f7dfb1d
SHA512
c33cd28a6b6223be374800615cc6a517cf2c788904f4926a6705ca82839e99fb73071eadb8dd8dafc0cef9fbb529edd016684505f9fef851601f5030f551d634
SSDEEP
384:/dD9d6G4GwTrzM6HmCBYAaaUKvmaDLw9P9nxOjHIgcEnONFh8zgZ2By5G63fUmF:/nkXMBaU8Lw9FnxuogsFh8gZGE
Checks for missing Authenticode signature.
resource |
---|
001f7345094f2bc1c82ea95c4b3f329d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindowB
GetTickCountA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ