EnHookWindowB
GetTickCountA
Static task
static1
Behavioral task
behavioral1
Sample
00176a6a891f85c84fe7842c61a0c8a9_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
00176a6a891f85c84fe7842c61a0c8a9_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
00176a6a891f85c84fe7842c61a0c8a9_JaffaCakes118
Size
516KB
MD5
00176a6a891f85c84fe7842c61a0c8a9
SHA1
6741019c113906cfaaabb5d7bade61364c09bedf
SHA256
4aa43f2baaddd9ab6a01d875b5527483590ec05d06c6fe661576defbdd4c4cfb
SHA512
ad76e1739ea6025fc14a2926cd6b7fb417e9066bf431c4dbc2f7b96a25aa81da7f788d8ae3a84005e56c2e4f2ef1ce0dd91613507e69dadced55a3624a2c609b
SSDEEP
384:rdD9d6G4q6gkfkfD1v1/1duaaVqnKya3WvTNkj8ycHE7uAzgI2NN8e/KSpvE:raDf21d6R0nKWvTq+FAgISNfVE
Checks for missing Authenticode signature.
resource |
---|
00176a6a891f85c84fe7842c61a0c8a9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindowB
GetTickCountA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ