EnHookWindow
UnHookWindow
aaaabbbbcccc
Static task
static1
Behavioral task
behavioral1
Sample
002b1843bbeec16a62534c9450d9dc80_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
002b1843bbeec16a62534c9450d9dc80_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
002b1843bbeec16a62534c9450d9dc80_JaffaCakes118
Size
23KB
MD5
002b1843bbeec16a62534c9450d9dc80
SHA1
e2e1f5a19007a2d1355d4f3cdd8b0a18ecb5d69e
SHA256
a21a22792f08e13c5af2d01f93e02c2489f11a19a146b729b3b20121b9fab472
SHA512
ca062ad4cba80c3f91247ac2fdbccd080bf270ac2390d75f78e30f2002bd1053293b2ef0642edfa9f085275d8787578d0b855b0b59defcdcc2ca1ce570952d75
SSDEEP
384:Q8SdD9d6GoOi45LwXW7V5y2bWbxhRD0aBtGO9NzmGUE/wJzEZ7fMz6Uj3:8GihnXajz9NP4EZ7fehj
Checks for missing Authenticode signature.
resource |
---|
002b1843bbeec16a62534c9450d9dc80_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
UnHookWindow
aaaabbbbcccc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ