JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
1674fa59d8cac282eadb7fab0122825b_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1674fa59d8cac282eadb7fab0122825b_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1674fa59d8cac282eadb7fab0122825b_JaffaCakes118
Size
482KB
MD5
1674fa59d8cac282eadb7fab0122825b
SHA1
945adbf8f24d64d6469d899ecaf39e33382d389a
SHA256
29d11d8edc037f1856282e25f5b793ae6b0a6fb929479dcbab646b6f998faf25
SHA512
435685c6a22bb3a5c5ffc1bf697dc28a47a9a575fc0d50e504945262f367d9339dbd747e4ee16aef9e6deb94ae8123dffe9ad3ca18ff8484b71ac0e6a0d5ffcd
SSDEEP
12288:iFFT2dXQrp7cixxekGw22b7fT9x10WGyfx:iKOVci5GY7fb1fGyf
Checks for missing Authenticode signature.
resource |
---|
1674fa59d8cac282eadb7fab0122825b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ