Hookoff
Hookon
Static task
static1
Behavioral task
behavioral1
Sample
2cb22e0445c16a2bb348dac0cdebab89_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2cb22e0445c16a2bb348dac0cdebab89_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2cb22e0445c16a2bb348dac0cdebab89_JaffaCakes118
Size
32KB
MD5
2cb22e0445c16a2bb348dac0cdebab89
SHA1
59cc8b6f7d56122a3a1c31dbc94b77890eaee749
SHA256
90b5e32b83e8955194cebcb7519bd5b387925de02442d31da06fadb9b39e3b6a
SHA512
3edf056925c3bb963be547b299aa6d38afd2c1c5c59b22c7db14da3b3f4066d1c72da1b7d9d7f1592af36643cf52365b451ee237e6b635ab572cd6980a868049
SSDEEP
768:HeHqE1sz7LkodKZPuJVdgAbz9XITh2ds5i4aQ5h6aZ:+HqE1sUPugKzNI12ds5i05h6aZ
Checks for missing Authenticode signature.
resource |
---|
2cb22e0445c16a2bb348dac0cdebab89_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Hookoff
Hookon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ