MHook
MUnHook
Static task
static1
Behavioral task
behavioral1
Sample
5a3b6ddea4d5079e23490fa78698a6d5_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5a3b6ddea4d5079e23490fa78698a6d5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5a3b6ddea4d5079e23490fa78698a6d5_JaffaCakes118
Size
23KB
MD5
5a3b6ddea4d5079e23490fa78698a6d5
SHA1
569263a53d022d9f2d7b3c1fcdf4c11826c2d7db
SHA256
b6fdea4e9c45847701cddb52ca0677dad5cd6c7fd29bf9191dc27f028913a7f3
SHA512
086d5a0df8ca7d06f85b93b703639a721520a692fd5b0016a9c5414b912ab59b4a27aafbd151512081b97e106fa031ec15672fb90a9b7d33b57d4aa721fd6c12
SSDEEP
96:nP8/ESzSwzsEt9z93dTLsX/kkI2hQ2lUoJ4k2B:nFPEt9z93dnKrQ2lLb2
Checks for missing Authenticode signature.
resource |
---|
5a3b6ddea4d5079e23490fa78698a6d5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
MHook
MUnHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ