EnHookWindow
UnHookWindow
aaaabbbbcccc
Static task
static1
Behavioral task
behavioral1
Sample
0d38a4f256b662b17b5e484a6bdc7ef2_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0d38a4f256b662b17b5e484a6bdc7ef2_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0d38a4f256b662b17b5e484a6bdc7ef2_JaffaCakes118
Size
20KB
MD5
0d38a4f256b662b17b5e484a6bdc7ef2
SHA1
e486cbc0c1418768291fa046dbcb9609dfd280e4
SHA256
94b6ee42307ae0c8d0984d457272dc37fe760c6b73f5829729df50f91b31f718
SHA512
7c15008199c255eccb4539f729ce5dd44479baa8b9d09156cc8be33bc2606046c1c08444a765a2bcb46684f22aa936d5581ae7e9ba42378caa85b712018df6e0
SSDEEP
384:dyVlNjtU2eBVwrEZsqco1ryCGO8gj0CTfc6TR4Xu6WzEZhC:gVli//j122TfcqSXaEZh
Checks for missing Authenticode signature.
resource |
---|
0d38a4f256b662b17b5e484a6bdc7ef2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
UnHookWindow
aaaabbbbcccc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ