EnHookWindow
S45pFireWf4l
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
0045dd61362f04b0b4606a14d0c8c3e8_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0045dd61362f04b0b4606a14d0c8c3e8_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0045dd61362f04b0b4606a14d0c8c3e8_JaffaCakes118
Size
2.0MB
MD5
0045dd61362f04b0b4606a14d0c8c3e8
SHA1
8ae3b18454edf25a22b2a3c9e28f4b77cc0153d4
SHA256
cd7e5b44eda17ae44d40d9355fd69ecb36c787fb44b18e22e2f4b94388d872d9
SHA512
fe5225dfa9e684512ea2f5cbc702bed010f2e87f75dc294fe919b3954df1684f604542535e09ac276d8971658e069cf7c911a5614513e5cb50cdff750e8e308e
SSDEEP
384:WPyZNjtU2mO4JDFUeXgzZFnIlu5jL2CCzElMH7HQW:WyZv6HXmZaluVL2CiElMbHF
Checks for missing Authenticode signature.
resource |
---|
0045dd61362f04b0b4606a14d0c8c3e8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
S45pFireWf4l
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ