HookProc
InstallHook
StartHook
StopHook
UnHook
Static task
static1
Behavioral task
behavioral1
Sample
05c301d90d60764f6c360d7e0cd2e1b6_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
05c301d90d60764f6c360d7e0cd2e1b6_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
05c301d90d60764f6c360d7e0cd2e1b6_JaffaCakes118
Size
51KB
MD5
05c301d90d60764f6c360d7e0cd2e1b6
SHA1
edc1ca8d60eb8cb593bc99964c0dfc91dcee4675
SHA256
3b8a7704070267a66d345939f39fc370632a6ec7e2250f1a03b0d27644d3f42b
SHA512
9caba8e728573034538c1b491496c72f5ed2b55bee1c9fa3ea32617c8a95eec7f5a7a16d7fab17f5277cb1d997d9ce422b96878b1aeb789b88e4898a44e2a08d
SSDEEP
768:e3niJquQHLdwNhlN2ouTSL9e2oinBDeKgq6T3iwX9V+r+E4Wt289xCWtK:e3iJquQrGBuj2oDZTywtVAfc89xCCK
Checks for missing Authenticode signature.
resource |
---|
05c301d90d60764f6c360d7e0cd2e1b6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
HookProc
InstallHook
StartHook
StopHook
UnHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ