EnHookWindow
UnHookWindow
fs448547aaaa
Static task
static1
Behavioral task
behavioral1
Sample
0632b82e8a9089d7179448239839c25b_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0632b82e8a9089d7179448239839c25b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0632b82e8a9089d7179448239839c25b_JaffaCakes118
Size
20KB
MD5
0632b82e8a9089d7179448239839c25b
SHA1
848d9ec5c9be6be97273701543f6d8df469a6214
SHA256
6b7570a8e275bf808111d30ffd50cd24b9dd89d0a61d83b9340af564a961513c
SHA512
1f8da3f337912620ea44d68494b63d99533d2478241bf5c1f76a3e53e9913e68289bcef1c4881e386cc114b1bba2472838ca646fcf5fb232badff898126e03fd
SSDEEP
384:hPyZNjtU2mXQp8D0bDARQROC1Q1JjbjpjghULzxsaQaXG:5yZ+BM6ujK1xvlsUHxsaQa2
Checks for missing Authenticode signature.
resource |
---|
0632b82e8a9089d7179448239839c25b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
UnHookWindow
fs448547aaaa
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ