EnHookWindow
SkipFireWall
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
001e380b23d23e35ade7fe5cd793c220_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
001e380b23d23e35ade7fe5cd793c220_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
001e380b23d23e35ade7fe5cd793c220_JaffaCakes118
Size
23KB
MD5
001e380b23d23e35ade7fe5cd793c220
SHA1
10fba37cddadbb0da69b8d622910dcd32260ad36
SHA256
ce025ad965d3b548d8f4c1d560fa6e92f12d5b3caf1a84baf9b9575f391f9ef0
SHA512
494bcf749273427eafa169e56edbe46dab8e8ef4ef72890b9e92e019348a3b31074e1e052b8e1770416010f144f2c88b7342e3ced610f62e467ac17478451b77
SSDEEP
384:mPyZNjtU2m2xY4xFVFUHl8q8gQuBC1aRjpepB6oz1Zgh6sY+:GyZbd5FS8qTx5pe/6o1ZNY
Checks for missing Authenticode signature.
resource |
---|
001e380b23d23e35ade7fe5cd793c220_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFireWall
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ