HookProc
InstallHook
UnHook
Static task
static1
Behavioral task
behavioral1
Sample
a9866e8a4fc7bec1c8f7aaa9345a6339_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a9866e8a4fc7bec1c8f7aaa9345a6339_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a9866e8a4fc7bec1c8f7aaa9345a6339_JaffaCakes118
Size
30KB
MD5
a9866e8a4fc7bec1c8f7aaa9345a6339
SHA1
60dfff434393ea71ee38486c132f6da9aeaab995
SHA256
2204a0c74ca78fcd4b4552b71bb69171c7d7d639a31ef4e1775189f6e0a352df
SHA512
6e2fd19bd34fd99a5e0c363f6355d3751e35bc6968c955a68e3b1b442b29253414e3cb2cb01f79c59824555f11627d2212335cbb06fc3142b8254bb80e71e386
SSDEEP
768:FOwkqyXVsz9O0QdrOMnG4b951B5wV1ycip:IpqiVsxTMf9TBpcip
Checks for missing Authenticode signature.
resource |
---|
a9866e8a4fc7bec1c8f7aaa9345a6339_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
HookProc
InstallHook
UnHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE