EnHookWindow
SkipFif45all
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
0084aeeb6b58216564fbe5873551f1f5_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0084aeeb6b58216564fbe5873551f1f5_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0084aeeb6b58216564fbe5873551f1f5_JaffaCakes118
Size
22KB
MD5
0084aeeb6b58216564fbe5873551f1f5
SHA1
0b857d3c602932caab1e7702c614046681dd18bc
SHA256
c9df9cd558bc748b75ef07cd1392c6f4ae3cf0e47d810198612514289672f1f5
SHA512
f072adaafa08e4f06150dda7ef6d27ec302597cead22ca5bbfc123018e3a377da75fd982f4e66de07831e071ac5559906790576249db5a0f19d457cfed11a2d2
SSDEEP
384:0PyZNjtU2mPgAL0GdjDLFTF+14F2jZ1dhzxZqxqh:kyZWrxDLy4QZ1dlxZqgh
Checks for missing Authenticode signature.
resource |
---|
0084aeeb6b58216564fbe5873551f1f5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFif45all
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ