EnHookWindow
Skip3546Wall
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
0070d105f3869409be775c36d03c19fa_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0070d105f3869409be775c36d03c19fa_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0070d105f3869409be775c36d03c19fa_JaffaCakes118
Size
27KB
MD5
0070d105f3869409be775c36d03c19fa
SHA1
c4da573dba86924eec2417e657ff8183efc4e1fe
SHA256
4532386b6581ca41f8fdbf58206c9aa295ae115cae5e1d12a3be11bec90173f5
SHA512
2c177ceeea706a764b4c3463a53051b131e89bc709536c7e8306ff9802d9620419f08145e551c5984e5373100a2eb73690f795daaf253c3738fc7eff098613da
SSDEEP
384:ldD9d6G4Cw58MiiIC9s02nrmLRMRU0zkjh98BQ5F8jUWEKVjkzgind1lWscP:ljegiIvmCU9hWK4UAkgid7Q
Checks for missing Authenticode signature.
resource |
---|
0070d105f3869409be775c36d03c19fa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
Skip3546Wall
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ