EnHookWindow
Skip3546Wall
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
0d98fb353ed1e32a9364abc5f3b2fec6_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0d98fb353ed1e32a9364abc5f3b2fec6_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0d98fb353ed1e32a9364abc5f3b2fec6_JaffaCakes118
Size
21KB
MD5
0d98fb353ed1e32a9364abc5f3b2fec6
SHA1
54b30d6076c54541a79542bce5a1dff44a35ea1b
SHA256
cf71716989c7ac46bcc88f6ba9009f35472b74cfe2fd38756703a0a7622fb9bc
SHA512
89654024e665e8f9ba4e99d85a6c4408b13d08f13cd56acbab38c941827da86eeb5ff5862683f2a89016900e0e110310504a0338c4ce084524bcbc5a45b9d390
SSDEEP
384:J4PyZNjtU2mapoCk3zj0Vb32KIKah6Y+IymeF4HQJjb/P2N1OUzgCoxqMuFNFFv:KyZngM2vBcYBX9QSN1O0gCoxqM8J
Checks for missing Authenticode signature.
resource |
---|
0d98fb353ed1e32a9364abc5f3b2fec6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
Skip3546Wall
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ