EnHookWindow
UnHookWindow
aaaabbbbcccc
Static task
static1
Behavioral task
behavioral1
Sample
00202a4e70187d16e85d51214b17abc8_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
00202a4e70187d16e85d51214b17abc8_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
00202a4e70187d16e85d51214b17abc8_JaffaCakes118
Size
21KB
MD5
00202a4e70187d16e85d51214b17abc8
SHA1
64705384c99c05b5db113c60a700ba1bd3408805
SHA256
2971247a140f89624955077f4c3a8467751f3c139e7d68bdbc0695be1f615aac
SHA512
e735844d0b7beedad9f021e749183080ef7784753c2eca9c958f51d0b3fcfe850e5797799b64806327e426883ead5704ffea54ec9c306a48ff53f20accf9846d
SSDEEP
384:5yVlNjtU2eGg45LIe6e6dVx/NqNhlL8urVwOT6JG4bFdMgzEZObK39+:MVlmiKd1NoVpTUXdREZObv
Checks for missing Authenticode signature.
resource |
---|
00202a4e70187d16e85d51214b17abc8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
UnHookWindow
aaaabbbbcccc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ