HookOff
HookOn
StartHook
Static task
static1
Behavioral task
behavioral1
Sample
29311f8a920826917496418bf727c108_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29311f8a920826917496418bf727c108_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
29311f8a920826917496418bf727c108_JaffaCakes118
Size
27KB
MD5
29311f8a920826917496418bf727c108
SHA1
5c570fcfad38bb9a897755e0d8ed366e528c245a
SHA256
7531515e29dee5853ebc5f3bb3e7b5c24662345df61a8a7595543b0825946b7a
SHA512
4eca6221277f1847cb83ef965a19ae9dc49a18ff30d71b7f009379f8b9c49a8959e48163c7fb58df7cc742da43bcde913b2889fbf6b1a1fbff3d13895aa3ff52
SSDEEP
384:ewAHxUShqujrBKnGQm9cDLfoAyqZRvPa1Zw2Q3GZuTKtsV0u85+Km+wNUOAzL0kN:wKShquPB0GQpD0/+RvJ2YWuTBxWLZ03
Checks for missing Authenticode signature.
resource |
---|
29311f8a920826917496418bf727c108_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
HookOff
HookOn
StartHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ