pt_tzHook
pt_ksHook
StopHook
StartHook
Static task
static1
Behavioral task
behavioral1
Sample
60b25f05eae217a7fe378b9fd9e32bb2_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
60b25f05eae217a7fe378b9fd9e32bb2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
60b25f05eae217a7fe378b9fd9e32bb2_JaffaCakes118
Size
28KB
MD5
60b25f05eae217a7fe378b9fd9e32bb2
SHA1
b47ff406a6537f7555ec7a2c1b732892073a0f76
SHA256
99cc0148b044941d6b0e741baa16b340d1584b493b749574df3f19053506df70
SHA512
2231ea0033325f27200ec677c5dc3825cfd9c865c4a6e9418dae8e29950ce4da2158dcae2632ac52ffb46003f20947125fb21d6d693f8b7422e758a5831eb0d9
SSDEEP
768:oVRmy97ieGelW48O/kEejJ0L3TsAqBje0uSL5AY:W9fGerRxT3oAqM0uSC
Checks for missing Authenticode signature.
resource |
---|
60b25f05eae217a7fe378b9fd9e32bb2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetModuleHandleA
LoadLibraryA
GetProcAddress
pt_tzHook
pt_ksHook
StopHook
StartHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE