HookProc
InstallHook
Static task
static1
Behavioral task
behavioral1
Sample
81c4acd9fa6210d49e5c2f5809deb060_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
81c4acd9fa6210d49e5c2f5809deb060_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
81c4acd9fa6210d49e5c2f5809deb060_JaffaCakes118
Size
49KB
MD5
81c4acd9fa6210d49e5c2f5809deb060
SHA1
2d88cd1838fe0fec6ebf26849932da4aeab510f9
SHA256
420a5475de0ef90a738b65031f470c5fff9c27baa3abee2fadda51ce6e9945f2
SHA512
5d489bbc0f4c82306f6afd3aa34c9704a898b311792b5464e5ae58a6fc0ab1cfabeae4a3e3293bdce1894a32bcb7029a41b1b1524c4fea488fb981c1a702ef71
SSDEEP
768:c3niJqLQbLyBwSheSFIWre97mbv7pAar2JxJq10BsplRn3Bi4ytMwM34FI7oa8x:c3iJqLQf2mWE8v7owpnQ6Z3+jx
Checks for missing Authenticode signature.
resource |
---|
81c4acd9fa6210d49e5c2f5809deb060_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
HookProc
InstallHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ