EnHookWindow
Skif4freW4ll
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
b0209fcc9f867dbfa7a857f1b6aebe5d_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b0209fcc9f867dbfa7a857f1b6aebe5d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b0209fcc9f867dbfa7a857f1b6aebe5d_JaffaCakes118
Size
22KB
MD5
b0209fcc9f867dbfa7a857f1b6aebe5d
SHA1
c2b5cc9f72100eca241b079bd15656bd374bc402
SHA256
df2a34c693f8b60714cdee728fe5343489fbb5e9ff5d8d6a01092ad285562fdf
SHA512
d5451875fe88cc22abbd4402d3cd88c6a76043d4f82a258245c567560b17ff47d1054337ec11f329be2ffc24c379fe07203aefd3470341cb2d2449bc15acfd2c
SSDEEP
384:qOr5NKZ2CUgMsnSLBuQ3XQnk2kHIpEicHjOawFEYDnA0zEPMYYO2oRuqQ:xr5lH7gnxkHOcDOawaUEP6rQi
Checks for missing Authenticode signature.
resource |
---|
b0209fcc9f867dbfa7a857f1b6aebe5d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
Skif4freW4ll
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ