EnHookWindow
SkipFif45all
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
18041be3453a6ecec82e45e5875cc6b8_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
18041be3453a6ecec82e45e5875cc6b8_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
18041be3453a6ecec82e45e5875cc6b8_JaffaCakes118
Size
21KB
MD5
18041be3453a6ecec82e45e5875cc6b8
SHA1
675db25efffa12450e62c517db9a577e6257dfd9
SHA256
f2c956cdb7a38904ec78f7dbf1ac546bbf527e8f589e45527703145dcd931102
SHA512
07b9c406dd0d873c12344797e0101098cbb5b81e420d6d599ae138a43443f58acb498bbece2699c4b49422675042d4240d1a815801d671d5df955704263877cb
SSDEEP
384:81au0NKwhdrFHGKemrI7w9tStmjhtCeWpzwueYYOG7:8Uu0ZFGKi7w9tSghtCwu45
Checks for missing Authenticode signature.
resource |
---|
18041be3453a6ecec82e45e5875cc6b8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFif45all
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ