EnHookWindowB
GetTickCountA
GetTickCountB
GetTickCountC
Static task
static1
Behavioral task
behavioral1
Sample
000c0a617fbe626be55e63145c0131c0_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
000c0a617fbe626be55e63145c0131c0_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
000c0a617fbe626be55e63145c0131c0_JaffaCakes118
Size
514KB
MD5
000c0a617fbe626be55e63145c0131c0
SHA1
2100ec612a6ce749e807b9911fa8978b646afd6b
SHA256
6a90faf00252df547d5d457a19637200978e5e8579d4dd14c47af048c85b4be3
SHA512
de4f5cd92feeb40c944744f9600cedef65d2202b8034322a5a2518c8c8a5fa2a7f381380263ad4cf69e3f74c13455a5ae3dae35cc6145c40064ebfc49d283ef2
SSDEEP
384:n1idD9d6GAvmAECbaU+M/cGMH7zjuGSaIOnc/cAnNDrXDOiEXlJPWhnzXeyz5ULF:n0XD++SaRc/cANrOhJuhzXeCmL1vVZj
Checks for missing Authenticode signature.
resource |
---|
000c0a617fbe626be55e63145c0131c0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindowB
GetTickCountA
GetTickCountB
GetTickCountC
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ