EnHookWindow
SkipFif45all
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
09e0d1caf63b71fc8f1ea390253d1c77_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
09e0d1caf63b71fc8f1ea390253d1c77_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
09e0d1caf63b71fc8f1ea390253d1c77_JaffaCakes118
Size
26KB
MD5
09e0d1caf63b71fc8f1ea390253d1c77
SHA1
9ac2b7f20caa56a43293dff6ec04020e24f17610
SHA256
046df619076beefdc861bc63edc5605f72eeb7f5ac7eef44d4a9c1150f1d425a
SHA512
204c147d909fefc546dd095f58825c2fe80903c477c2850cb008891ee00d14c570c8e3b09ed9876e401c875ae17d1010e77a8d66b045d50c0c036a4fbe1f68cd
SSDEEP
384:zdD9d6G4GwATX/88e0ZhNKSumhekR4Vjzos0EznaH7zgZ2eJnCqSF:znDvBNjekRezoX3gZRJKF
Checks for missing Authenticode signature.
resource |
---|
09e0d1caf63b71fc8f1ea390253d1c77_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFif45all
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ