EnHookWindow
UnHookWindow
fs448547aaaa
Static task
static1
Behavioral task
behavioral1
Sample
1a63adedeced82ce5729b0aca38e962c_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1a63adedeced82ce5729b0aca38e962c_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1a63adedeced82ce5729b0aca38e962c_JaffaCakes118
Size
19KB
MD5
1a63adedeced82ce5729b0aca38e962c
SHA1
fdbd36f3d3068cc43c06d488ac81c84823564d82
SHA256
e264fe5b4ee68264f20b4f8e8bf80cfa4c878fe5f67d314e843a55d71400f4da
SHA512
f077470679f527a5cb0e8f8adba4b049eb9b2c07e2fccc1a513ff799f12c1daa94a352f8421f2d9c8dc442993a30ec535b8b66cdefc0398448ba2b4cb7e4ee5e
SSDEEP
384:Fqau0NKwWFEnUYJoHEcw5v1sjAiPtgGzwugYYOe+:Fnu0RtGzw5v1clPPwuuE
Checks for missing Authenticode signature.
resource |
---|
1a63adedeced82ce5729b0aca38e962c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
UnHookWindow
fs448547aaaa
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ