EnHookWindowB
GetTickCountA
GetTickCountB
GetTickCountC
Static task
static1
Behavioral task
behavioral1
Sample
002cb556bad9389e575c449fc2f7a9be_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
002cb556bad9389e575c449fc2f7a9be_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
002cb556bad9389e575c449fc2f7a9be_JaffaCakes118
Size
517KB
MD5
002cb556bad9389e575c449fc2f7a9be
SHA1
7d5ecdc50e9c6acb65e054df5e63f28c5986a8ca
SHA256
065b68d5c10aaed4be0437f254478e8777bbd92f49ac3b9acf31d4740cd84b8f
SHA512
d8d1b2a5279be55aa74cc69af0edda60eaaec583023c2add89c8d68adad148965108f38d11848c64c131e18954b11337869e7f344aac1cda1a6500bda8c095be
SSDEEP
384:hdD9d6G42wTDnyyspcqPBifgLZY81rc0zwn8Ol7sd+ejPafEdS8zXtxFDhXwSz/0:hHkWyspwGZlrcdZUSN8XtnDhgC/0
Checks for missing Authenticode signature.
resource |
---|
002cb556bad9389e575c449fc2f7a9be_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindowB
GetTickCountA
GetTickCountB
GetTickCountC
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ