EnHookWindow
Skif4freW4ll
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
4cb399808b1ca9b2e1cd2833c983613a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4cb399808b1ca9b2e1cd2833c983613a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4cb399808b1ca9b2e1cd2833c983613a_JaffaCakes118
Size
18KB
MD5
4cb399808b1ca9b2e1cd2833c983613a
SHA1
aace88c03f21033d3b493bfc29f07a08fc21ab67
SHA256
e7a04bb349dce61eaab9269b03203c72f92af824c6b02fdd7cda8f34e2351066
SHA512
574112d595055f947d308958ec26157914cf1cdf306376f8f6d8cd921151e7b1fc2abfb082af2e5513aa73283d617c9516e48b30113f43326fe8730dbc838446
SSDEEP
384:Wau0NKwJNw4QyYwNJilqpsyljBSz1ScYYO9:Du0ZkygfyBo1Sq
Checks for missing Authenticode signature.
resource |
---|
4cb399808b1ca9b2e1cd2833c983613a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
Skif4freW4ll
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ