EnHookWindow
SkipFireWall
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
0001d94f98a73e3ced234f7f54c0dcf6_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0001d94f98a73e3ced234f7f54c0dcf6_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
0001d94f98a73e3ced234f7f54c0dcf6_JaffaCakes118
Size
22KB
MD5
0001d94f98a73e3ced234f7f54c0dcf6
SHA1
4f738113384509916d5e35485655ded7e5545bec
SHA256
a9e6d0acb0726a5eddf04964bbd41df934896243af483e2e58dc3b6f7d8379f8
SHA512
53b1b6081c8f964a417a7596cb843f2de3f815c3ae40dee73850588286047a1d9c6912d76cb62d6afc9368f40aaaca2da8055de45d74aec8cd872715abb94d6a
SSDEEP
384:BPyZNjtU2m/ImLVFbz1P8u5mAg5dv/ZMigt+j93UEDw+hzETcJCKc:ZyZOx1EuVg5dvVgt+939w+lETcJTc
Checks for missing Authenticode signature.
resource |
---|
0001d94f98a73e3ced234f7f54c0dcf6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFireWall
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ