sksHook
stzHook
Static task
static1
Behavioral task
behavioral1
Sample
1860e661ba50fd1525ab8c17ccfcc785_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1860e661ba50fd1525ab8c17ccfcc785_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1860e661ba50fd1525ab8c17ccfcc785_JaffaCakes118
Size
13KB
MD5
1860e661ba50fd1525ab8c17ccfcc785
SHA1
d495fc1b5f700fffbbbec6d36a4c14215d4ca0af
SHA256
55349acc74f1a85af57066a3d4cd1cb94ea9a7176534cc1812ee4b72c85647f2
SHA512
d66afc514cf65492f765754a4e0070e1822eba9253055783867141df3b531b4217e84176ac485fb1c4fded212f14224365ec4eb9a917ae67b2442bb62666af34
SSDEEP
384:J7WAhoAar5szG9m4zWKGrZ4yJPCd+DkizGYHlhB7:pdrmGCdGtVCvizGI
Checks for missing Authenticode signature.
resource |
---|
1860e661ba50fd1525ab8c17ccfcc785_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
sksHook
stzHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE