EnHookWindow
SkipFi2eWall
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
002d47e84fed7682ca2f98a694d272b9_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
002d47e84fed7682ca2f98a694d272b9_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
002d47e84fed7682ca2f98a694d272b9_JaffaCakes118
Size
21KB
MD5
002d47e84fed7682ca2f98a694d272b9
SHA1
331f584b4830241ad8fbc1a79cb6e0826fa366fd
SHA256
843e7e88ba5b101021e3054aa801058966520b19f7c3769dcc50f691d5606b37
SHA512
e85d7efbf1211b311c9cbcfa66ecc0fcedff361651e11a7fa3a126afb3335df598879225b18df01cf539b22ba6fc87189c1003247763e8fb1c2705c4b1f8b82e
SSDEEP
384:vyVlNjtU2eZ8ABDZ6Uw2+k436mMBtejEugzEmCqQS:qVlvqZY1k4BqteE7EmC0
Checks for missing Authenticode signature.
resource |
---|
002d47e84fed7682ca2f98a694d272b9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFi2eWall
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ