StartHook
StopHook
pt_ksHook
pt_tzHook
Static task
static1
Behavioral task
behavioral1
Sample
5aba192f64ed840121518381d0feb6e9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5aba192f64ed840121518381d0feb6e9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5aba192f64ed840121518381d0feb6e9_JaffaCakes118
Size
34KB
MD5
5aba192f64ed840121518381d0feb6e9
SHA1
02ef6c1cd1288c1fc01530eb0b010de161eee183
SHA256
6db16ab8db2dc9ed6c243b38669c9c39fd2e5b750c8e83af0e209ace76761839
SHA512
aa16063a38c7b0c8f3990362c897acb9f6d217e1e889a697912e181b04e46f65b47dd7f177be43f6b55d3fdee14462c815c01ff1955a4b48f307dbc31185a5a7
SSDEEP
768:Q7fl1udj6s9NA20f4SX7RYSfrfyFV13h42fQu6Ox6eN:Q7vu96e7yfWIr0N
Checks for missing Authenticode signature.
resource |
---|
5aba192f64ed840121518381d0feb6e9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
pt_ksHook
pt_tzHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ