inhook
unhook
Static task
static1
Behavioral task
behavioral1
Sample
c8d187b9504c4ead8a115cd1b7ab8b15_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c8d187b9504c4ead8a115cd1b7ab8b15_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c8d187b9504c4ead8a115cd1b7ab8b15_JaffaCakes118
Size
228KB
MD5
c8d187b9504c4ead8a115cd1b7ab8b15
SHA1
82368a969277a01e4e2e6014c9fae9bf46a78d4a
SHA256
8b140e38624ff088396476cb53b6c7952ed7ff05340da15a3da495b6b389f2e9
SHA512
53996f140aafecb987413954fd56c086a1849b96f4fdfa482cdc6b7fbc9f53699c07b6efb6f4d9e1171d571fbe08d21227bb5a56bbdbf4823f3687f24dc595a8
SSDEEP
3072:3OUpAN+u6f0h5sLuqStrSyexlMlPm25pr97GwdfqqI2sB5eH+DXqdZfi5POrz0fs:M6fYUVL725pyq8B0HwXQZOOHb
Checks for missing Authenticode signature.
resource |
---|
c8d187b9504c4ead8a115cd1b7ab8b15_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetKeyboardType
RegQueryValueExA
SysFreeString
VerQueryValueA
UnrealizeObject
ImageList_SetIconSize
WSACleanup
inhook
unhook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE