EnHookWindow
S45pFireWf4l
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
47ae75328a816b12b16e31ab825a42b6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
47ae75328a816b12b16e31ab825a42b6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
47ae75328a816b12b16e31ab825a42b6_JaffaCakes118
Size
22KB
MD5
47ae75328a816b12b16e31ab825a42b6
SHA1
3c3dcc231c80d8521428910348b7f3b19a342e67
SHA256
482ddfaacd2928ba978f38d5eba54cda9818db12b1c8b09ed64b820a8aea2545
SHA512
593fd610996810708047fd93dd114ce2ab181ef303102d46d81a5aa61c0bd4959439d3db9ec91ff6c0506852c95c72550f3c09ef35f38558a20011029aff65da
SSDEEP
384:KPyZNjtU2mO4Z7+NgI5R/6ItxeQT2SEk1jxP5it8jxiuSPzGSzElQcCco:qyZvu+5vT2PsgaYPzGSElQ7f
Checks for missing Authenticode signature.
resource |
---|
47ae75328a816b12b16e31ab825a42b6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
S45pFireWf4l
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ