GetMsgHookOff
GetMsgHookOn
ThreadPro
Static task
static1
Behavioral task
behavioral1
Sample
324412ea4db50bf85cd9300292826cca_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
324412ea4db50bf85cd9300292826cca_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
324412ea4db50bf85cd9300292826cca_JaffaCakes118
Size
43KB
MD5
324412ea4db50bf85cd9300292826cca
SHA1
cccd9589e4312773ba75e6911bf77816c7e06141
SHA256
877e9f0b8cf97629720aa98de080a03eeaa204f6f4b1e0bdcd9f5a9f4462c49b
SHA512
0417c0eb58b2cb8ed6e8b0ab8bac19fa521df1e223ae56ad2300a3757ca21675c52bf8ae137f7dc62d1bdddf126c87ea8b163393312a3edd4e89675090e0de3e
SSDEEP
768:yCqqhQfjyH476f7uU0lTCn//L5zmq6jo8GmzRsDe6ubePeF:1qqhQbQ476fSUKg/pMo8G6s6HF
Checks for missing Authenticode signature.
resource |
---|
324412ea4db50bf85cd9300292826cca_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetMsgHookOff
GetMsgHookOn
ThreadPro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ