JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
0ff4d4937819e9f2eaff05e271b3f84c_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0ff4d4937819e9f2eaff05e271b3f84c_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0ff4d4937819e9f2eaff05e271b3f84c_JaffaCakes118
Size
8KB
MD5
0ff4d4937819e9f2eaff05e271b3f84c
SHA1
1b28f08441138ef6eb0071750945af3f6653da7b
SHA256
51a95dcec213d9897e870e55c8a081d6f1fce48a62dc1e74a05c5e6295db92d7
SHA512
ad6c7cac12d03205378ee9ba5a5325a2efc47bdb853b10c2c13bbc3c8402eaa96d8b7f27e99bc8cbcd3e9e4ca209ff64d730ea9acb41660d70e41bbddae9b377
SSDEEP
96:nPU2DhNItAH5kwY2x8slSUiX5dj8l98355NjcW1NSbzR6Ft:nzD8tAH6M66t6d6yJ5NjcW1VF
Checks for missing Authenticode signature.
resource |
---|
0ff4d4937819e9f2eaff05e271b3f84c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ