EnHookWindow
UnHookWindow
fsd4534f5412
Static task
static1
Behavioral task
behavioral1
Sample
002d326c9e5754eae04b9a828c2acfaa_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
002d326c9e5754eae04b9a828c2acfaa_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
002d326c9e5754eae04b9a828c2acfaa_JaffaCakes118
Size
21KB
MD5
002d326c9e5754eae04b9a828c2acfaa
SHA1
ebc2b82920977303f86f172e463b32e3196cff2e
SHA256
35f7f4b3c8d3caa5464f325a6b6c191155015e05955b06de009b864717d5813c
SHA512
3fc0982c2f7e347b8cff4c631ad7e3a6517b0e3f1e01cf290314270b25c951d66f31a50d0845ceee178e413c423ea60eec771cff6f16e920ffd1c3a8c25131c0
SSDEEP
384:82pdNjtU2Oy6rsuSd6G2As/ARRTCVUkl7GE3gjEm/nTzwNvVQW6v:82pdrrX2RMR+VUkxGE3QLnvwNvy
Checks for missing Authenticode signature.
resource |
---|
002d326c9e5754eae04b9a828c2acfaa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
UnHookWindow
fsd4534f5412
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ