EnHookWindow
SkipFireWall
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
004c008f8f2911a25fe9ebd323476cd5_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
004c008f8f2911a25fe9ebd323476cd5_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
004c008f8f2911a25fe9ebd323476cd5_JaffaCakes118
Size
22KB
MD5
004c008f8f2911a25fe9ebd323476cd5
SHA1
e65b3c612b4cd334299c2b9c9744d9ef0a39c68c
SHA256
ca7788ed9deb08db8c3d540536d8f842d474b0a6029b59b912e09b60d3033c38
SHA512
018fc44d6da63371573b40118408cacc7ee2664e186cf58308b2dc53de3bd0ef34ae8e0f6c1a0fe1fede30dce3d433d2fdc12428580b5f7dfa2613c6b58dc8a1
SSDEEP
384:sPyZNjtU2mJVAbAp6TS1rMe+8qc6Al+bi15gwjXFxR+rnz1cMhno6Vq:cyZidpOS5W8qbAg0gAXsP1ckod
Checks for missing Authenticode signature.
resource |
---|
004c008f8f2911a25fe9ebd323476cd5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFireWall
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ