EnHookWindow
SkipFi2eWall
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
361dc24c5eebe3d92b8edf9c23a4b7ca_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
361dc24c5eebe3d92b8edf9c23a4b7ca_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
361dc24c5eebe3d92b8edf9c23a4b7ca_JaffaCakes118
Size
19KB
MD5
361dc24c5eebe3d92b8edf9c23a4b7ca
SHA1
3151b649e803cd7dcb8d588b90f4457ca0e2d9be
SHA256
8842e281d5386207c909ca9259a8ab2ac991a1cbdc78841a5b7ecc6ca28930ff
SHA512
364e4ad4603c8149690451e5bdb2b0713190515883f6c51c3d2c3963168df1733f41c9136d1f21fb6cd01c9aa51d122445ed74aefdeebdc09effa1bfbcea53f6
SSDEEP
384:RPyZNjtU2mpNpEKmmhAu4a+i6DTDwJsfjNq4z1ZckQef:JyZaWeh8Fi6DTDwJsLNV1ZckQO
Checks for missing Authenticode signature.
resource |
---|
361dc24c5eebe3d92b8edf9c23a4b7ca_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFi2eWall
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ