EnHookWindow
SkipFif45all
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
0006ed8169623aba9a2a268ee05e8c0b_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0006ed8169623aba9a2a268ee05e8c0b_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0006ed8169623aba9a2a268ee05e8c0b_JaffaCakes118
Size
23KB
MD5
0006ed8169623aba9a2a268ee05e8c0b
SHA1
4aa3a301dee2021d44293383dcd6f4e5996b0a95
SHA256
20dd66904733617ac5789d33884b71166785680293c5e6e2f08f840faab7e7f3
SHA512
1bb47517c0e9cd84e62dc0bfd0c52f3c452dcf12e1a4ffe7f7ae5be5e5ee7e4a7e768c0b8498203eb99f92c07ce6f36a48f189ec5fdb02018dfcc5649b00c6c6
SSDEEP
384:RdD9d6G4nYwrMztnzvPKUumVXDdxjUSLzgZBUNUS3:ReDgZPZXDddrHgZ2NR
Checks for missing Authenticode signature.
resource |
---|
0006ed8169623aba9a2a268ee05e8c0b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFif45all
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ