EnHookWindow
SkipFireWall
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
00853f1cfcb52b5ec1116e2d32b40dad_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
00853f1cfcb52b5ec1116e2d32b40dad_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
00853f1cfcb52b5ec1116e2d32b40dad_JaffaCakes118
Size
24KB
MD5
00853f1cfcb52b5ec1116e2d32b40dad
SHA1
5a2ed794d5d53f89ada20a9d7459881759f774ae
SHA256
d6a5f258176ad4aba6ae64234bab027d226cd946762aae6361f276eec688f9aa
SHA512
78992bfba72a75d9eb90fa828ca944cb3b369415dfc550cc64a84d3283a7d89e12bf9200810532794bf4f51b97604f27eec27f9ea1a52a4d0124037d102a2bc2
SSDEEP
384:VfidD9d6GAW3Y4xFVFvt7+8aYt0zAV8jk6B1E5/u95ZDNE6JzF/xhXDtf3UsX:VaDd5FvI8aqPuk6BYmc6NF/XDhFX
Checks for missing Authenticode signature.
resource |
---|
00853f1cfcb52b5ec1116e2d32b40dad_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFireWall
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ