EnHookWindow
SkipFireWall
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
042597a705e9c6978420adf40528bc6d_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
042597a705e9c6978420adf40528bc6d_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
042597a705e9c6978420adf40528bc6d_JaffaCakes118
Size
22KB
MD5
042597a705e9c6978420adf40528bc6d
SHA1
22e0ae9b1f044e2625c4e072f61abc972eb3a6c4
SHA256
b00e56208f68b443109f6eccdc5a20252aba652b50861d681123d4295560da86
SHA512
ebc181c9136068c7c26d1e836ba4fe99d3631358425c9f457e8d7e7d695dddbd6a6c15d9c22b25b1370f5c610f5f658b25f0e049809147456a81f427e5ce1109
SSDEEP
384:ePyZNjtU2mWUQTQEAorlZytSHS5iRu7jIUTljz1LUhgYU:eyZ6dGat4oH51LL7
Checks for missing Authenticode signature.
resource |
---|
042597a705e9c6978420adf40528bc6d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFireWall
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ