pt_tzHook
pt_ksHook
StopHook
StartHook
Static task
static1
Behavioral task
behavioral1
Sample
5e21600e0442e6b726c35ffeba6e68d3_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5e21600e0442e6b726c35ffeba6e68d3_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5e21600e0442e6b726c35ffeba6e68d3_JaffaCakes118
Size
26KB
MD5
5e21600e0442e6b726c35ffeba6e68d3
SHA1
e41fff9096bed2623ec706015465dfe0866de060
SHA256
12d97b2fbbd76737111a35d421b98843625217f076e7aa9ec0897832b9e1bbb5
SHA512
39ee989afa1f042f1afe2f850467f1827762e1fd9c1888dc0d1de599cb144b99bd4e735aca809177f3ae18e51fba3a80b200c75a4b3ce23eddfe6af7bd1a5f59
SSDEEP
384:ONFHRuSKaN4MDPp0sQLVIPndymEWVs5Qi2WDE15AtHDBClEyP7UVd:4n97tpOpIVy6s5QfWDE1EjBw9I
Checks for missing Authenticode signature.
resource |
---|
5e21600e0442e6b726c35ffeba6e68d3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetModuleHandleA
LoadLibraryA
GetProcAddress
pt_tzHook
pt_ksHook
StopHook
StartHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE