EnHookWindow
SkipFireWall
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
000c1a8aa03398c92ef6e856ff27fded_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
000c1a8aa03398c92ef6e856ff27fded_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
000c1a8aa03398c92ef6e856ff27fded_JaffaCakes118
Size
22KB
MD5
000c1a8aa03398c92ef6e856ff27fded
SHA1
2d0d5d83afc81f6682e66e2510a0e6d2f5531ca4
SHA256
ddc1047fc540671b07c7b353702edefd835a7225c1ff4dc9e564c623701fe6c2
SHA512
bbb4b78e2e8170f8eca287568ee8f2ae273cfa5424aba82d04805e550fc630ad21dcc153eebee76a9248bfa9b4628c1d006ca95eaa765dc1c1ac311907bc26bc
SSDEEP
384:nPyZNjtU2mSEImLyT1qLYZmAt5nGj2crMiEwsTM/z29F1WS5:PyZexyTMkVt5W2PhO29Fj
Checks for missing Authenticode signature.
resource |
---|
000c1a8aa03398c92ef6e856ff27fded_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFireWall
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ