EnHookWindow
SkipFi2eWall
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
01c0ffbebbe7933069e64b9067c59fef_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
01c0ffbebbe7933069e64b9067c59fef_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
01c0ffbebbe7933069e64b9067c59fef_JaffaCakes118
Size
21KB
MD5
01c0ffbebbe7933069e64b9067c59fef
SHA1
65072352d5987e1d942af1b7a96518fc577d10de
SHA256
e0f314fbb5bb5591cc525e3f7b6272580d116b5f399a8f172b4d0db856959087
SHA512
4adea995017739d5f36d897b93c83c3597a41f2829e17f07d3b37a45d7d40513096b467d8cfea5b588e0cde91d98259632f9fb18424b95db41aa07a9a4be52e7
SSDEEP
384:JdyVlNjtU2eZ8ABDyFPa0XU74a3KWL1Oclqjj0O8tzEmy/2I:JgVlvqyl/U74aBRdO0LEmy/N
Checks for missing Authenticode signature.
resource |
---|
01c0ffbebbe7933069e64b9067c59fef_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFi2eWall
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ