EnHookWindow
SkipFif45all
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
00034b27e3a10b5b54a786659cc4c420_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
00034b27e3a10b5b54a786659cc4c420_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
00034b27e3a10b5b54a786659cc4c420_JaffaCakes118
Size
26KB
MD5
00034b27e3a10b5b54a786659cc4c420
SHA1
15db8f4804e0efb4496dfae25de06ce1fb901e35
SHA256
3b1fc6531964ec5a90c452ccbe79e0c272283ced8c0c7f73163c79db2947c304
SHA512
a2e2dd8f59747066782d782971e9d5b6b27f2b97b6e5e724bedd89188b971bbeaa3cad2d84d91047e71a8341a6abb1db69601c8a044ba34802a4de265fcad1dd
SSDEEP
384:7dD9d6G4GwATWnOhVEGawKJumauPqjU9VEV6Z8H7zgZ2vXFygc:7nDWoawJuPqU9G6Z83gZAVw
Checks for missing Authenticode signature.
resource |
---|
00034b27e3a10b5b54a786659cc4c420_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFif45all
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ