EnHookWindow
UnHookWindow
aaaabbbbcccc
Behavioral task
behavioral1
Sample
6fae6cffcb3903d3b717ff513a662b25_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6fae6cffcb3903d3b717ff513a662b25_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6fae6cffcb3903d3b717ff513a662b25_JaffaCakes118
Size
64KB
MD5
6fae6cffcb3903d3b717ff513a662b25
SHA1
eb36b03d87ae266a5cf16d85aa5d3143e5a7aa03
SHA256
64b0a8c09554305962e9e86b0c1bfa03c0fb50e59dab7c4d2e068bd4624439bb
SHA512
238c418ffbaf0554560f3c6104bd7c11246186c182c7f72d2dba9f84cdda93b617dea1f9dde399d3802bc2415859df92e0c64dfd9b66cb77b1ef81fe29602daa
SSDEEP
1536:xd/twKVDAArE4lNOzfO91CqdLlVT8jN2wQFLM4Uk:lwKVDAArE4mzfOv9lH5ANk
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
6fae6cffcb3903d3b717ff513a662b25_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
UnHookWindow
aaaabbbbcccc
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE