HookProc
InstallHook
StartHook
StopHook
UnHook
Static task
static1
Behavioral task
behavioral1
Sample
422fb7034fd8c5bba6b8145de2d2432b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
422fb7034fd8c5bba6b8145de2d2432b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
422fb7034fd8c5bba6b8145de2d2432b_JaffaCakes118
Size
51KB
MD5
422fb7034fd8c5bba6b8145de2d2432b
SHA1
c4ad025b5c55f3b3e937d471b3e6b8c9f39d2481
SHA256
2f5d1db8e15f9214087f70ae16ad6553d72bff4d7bbb22b1bc536c7f955bdcd8
SHA512
adf5f8f4ed4d41851f40ca781b4bb895d04a3b11617d0f722c2ac826d71648901971df3c4f3bfd627b37e7f0619fd4573fe9a01d201bd7f5f8d6253526069031
SSDEEP
768:q3niJquQHLdwNhlN2ouTSL9e2oinBDeKgq6T3ONE12r+E4Wt289zeWtK:q3iJquQrGBuj2oDZTeNE1Yf089zeCK
Checks for missing Authenticode signature.
resource |
---|
422fb7034fd8c5bba6b8145de2d2432b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
HookProc
InstallHook
StartHook
StopHook
UnHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ