EnHookWindow
UnHookWindow
aaaabbbbcccc
Static task
static1
Behavioral task
behavioral1
Sample
021d93f496cadb450f0e638b890a262a_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
021d93f496cadb450f0e638b890a262a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
021d93f496cadb450f0e638b890a262a_JaffaCakes118
Size
23KB
MD5
021d93f496cadb450f0e638b890a262a
SHA1
e4144dfbb0b004097b1e5069b772bb715400421f
SHA256
2ef1ca4f7473758320d3e7315056c4ec86ef9837c23212d7bde8e59bd169c578
SHA512
6a31fd38260d30a47fecf3597a771b5a5043a9594b17fe1ac77bb8d1efd9a36ee6a34f9748a10787ddd2a8da14baa4a6e95d6a441053e0a31d8aace249fbd240
SSDEEP
384:EqyVlNjtU2eGg45LouZJ8R2IEhQQ8RzNmG6GpJ1ELro0zEZ6bzxHcfV:iVlmiJJqPN7HpJcUUEZ6SV
Checks for missing Authenticode signature.
resource |
---|
021d93f496cadb450f0e638b890a262a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
UnHookWindow
aaaabbbbcccc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ