EnHookWindow
SkipFi2eWall
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
5a54e7f38bfec3ec92419dabb4b13339_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5a54e7f38bfec3ec92419dabb4b13339_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5a54e7f38bfec3ec92419dabb4b13339_JaffaCakes118
Size
23KB
MD5
5a54e7f38bfec3ec92419dabb4b13339
SHA1
c4a3557c8fef68cac5870e7a1467c3c7ce730811
SHA256
a0dea93fc318eecc1be08e315f1d00bf0af66233959ce3d0884868142cbb1e0c
SHA512
5fd015d0cadc989ff6d9448b1f969de4b1a85432bc90772e7dbb53791418fbc739517d4a08f03694685b22e2c665aa25cf76f4dc4c8b9b3ab284e1fc5147b896
SSDEEP
384:/yVlNjtU2ehQART0J1lyt+ZCC3LlTwMHifej8MqzEds8NtK8Q+:6Vl7a0J12+CCNwMCW8MKEds8NtrJ
Checks for missing Authenticode signature.
resource |
---|
5a54e7f38bfec3ec92419dabb4b13339_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFi2eWall
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ