StartHook
StopHook
pt_ksHook
pt_tzHook
Static task
static1
Behavioral task
behavioral1
Sample
d0f2a93422cabdf667dee82867b129cc_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0f2a93422cabdf667dee82867b129cc_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d0f2a93422cabdf667dee82867b129cc_JaffaCakes118
Size
23KB
MD5
d0f2a93422cabdf667dee82867b129cc
SHA1
0848380c716aa7c8fe721e50938c0bb94902b985
SHA256
32671392ca266fd10f0b37be5a1e7ccfad0b07d1d30892b60bb14d5d70b65b2c
SHA512
1edf9f1b44da96cd46c326b02fbf02851a32317edc6cdbf1d68c555c51b9fd9f030e87aebe4278ba62b9d91ae4e8e5b7114ede166bc62f1e48ebdc5763c12889
SSDEEP
384:+yHyqBnLS8tPc//fOCSUxqMQqf/0jKoANsA1HL++Et76Q4qAa64AeEj3:+MhYFxnDf/nZmAp+9T64Q3
Checks for missing Authenticode signature.
resource |
---|
d0f2a93422cabdf667dee82867b129cc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
pt_ksHook
pt_tzHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ