EnHookWindow
SkipFireWall
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
0c075ab8332903f253a4c7fe3287a9d6_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0c075ab8332903f253a4c7fe3287a9d6_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0c075ab8332903f253a4c7fe3287a9d6_JaffaCakes118
Size
24KB
MD5
0c075ab8332903f253a4c7fe3287a9d6
SHA1
4faf016bfb8159f1663ea6c94c6e8643be9abd88
SHA256
b8aaf7b6db06ff853ced1e4b178d7768ed117e95a5c9078c287acf76165843c9
SHA512
2fa5a147de426f87b1658061c510fb30747efb6e116d2aee0561f7ae0642ce7dfc4b887fe953cc30758d191163da368e06d53039cbb4cc757337fcfe3534019e
SSDEEP
384:VidD9d6GAG/Y4xFVbYxVm7kqck9NMMVwrj25MNED+INRjJz1ZThDpAic:Ubd5alqzzk223INRjN1ZNpAJ
Checks for missing Authenticode signature.
resource |
---|
0c075ab8332903f253a4c7fe3287a9d6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFireWall
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ