EnHookWindow
SkipFireWall
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
0c8467d6372b785b099abeeb63e154ad_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0c8467d6372b785b099abeeb63e154ad_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0c8467d6372b785b099abeeb63e154ad_JaffaCakes118
Size
22KB
MD5
0c8467d6372b785b099abeeb63e154ad
SHA1
e3c252024b1d1e7a5400edaea9279ba4583a0f24
SHA256
b10fd450f4dfdbe8f7778c495e5c4ac80a25dd45a2e4d63ef254fb53d6470551
SHA512
b65654bd29b9bcd87b29ddd039d230afd354855ea3a2e50e6ed86159bb0322987a1bf9b06775658c90a9c3ff436879c8cf91ba9775a110d19f5cf701133e2891
SSDEEP
384:JPyZNjtU2mSEImLyT1qLYZmAc5xvUZMujoHREWAY/z29mne5:ByZexyTMkVc5xvkoHHA629m0
Checks for missing Authenticode signature.
resource |
---|
0c8467d6372b785b099abeeb63e154ad_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFireWall
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ