OffHookPCSC
OnHookPCSC
Static task
static1
Behavioral task
behavioral1
Sample
a8ade9cd847640882d8a91dca007baa8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a8ade9cd847640882d8a91dca007baa8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a8ade9cd847640882d8a91dca007baa8_JaffaCakes118
Size
254KB
MD5
a8ade9cd847640882d8a91dca007baa8
SHA1
fabcb5a71f2a78a6e6879d1d40486c849563335d
SHA256
b931612c226df0b24554ab8f2a8b8acc7151a84316651b9553073990df24af22
SHA512
970aee8d1cbb13941abd582265c9497b4c669614dc6deefbaee654d4b530d95612d48cf87f195aaca7767fc7fa9e865f67e1394fd3a45cbd3d72b948e0e1e420
SSDEEP
6144:BCfArK2VJ8ig3UhzxlqxYNPP+Pt4n3dF3EO2vGPVp+BkSHKF2:BCfdW+jSzaxY8W/3E+PTbSHq2
Checks for missing Authenticode signature.
resource |
---|
a8ade9cd847640882d8a91dca007baa8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
OffHookPCSC
OnHookPCSC
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE