StartHook
StopHook
pt_ksHook
pt_tzHook
Static task
static1
Behavioral task
behavioral1
Sample
4104e1b93142ed7e525fc2651523acb1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4104e1b93142ed7e525fc2651523acb1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4104e1b93142ed7e525fc2651523acb1_JaffaCakes118
Size
23KB
MD5
4104e1b93142ed7e525fc2651523acb1
SHA1
8073de6c52cf767a58a6ad6ba0d00778f5f46fb5
SHA256
e98e8353ba53de4bea3f7a6ceb34fa6dfaa8ae674fa995e537c50e2f0c426617
SHA512
d7c658f818c5fe85a03624ba15fb33b74f4ed149b5a3d88c07abbf0c8531c4e7932c674c5a5f786fb0956b38f3e3e45b65503afb00bfa57468a824a08038e2ab
SSDEEP
384:Jycyq9LS8tPRqZudAXRnMHya9Cj6S2Fy3cno+Et7QvFpEBAa6nAUbvQCr3:JndcXRM39j/ScnokdmT6nr73
Checks for missing Authenticode signature.
resource |
---|
4104e1b93142ed7e525fc2651523acb1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
pt_ksHook
pt_tzHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ