HookOff
HookOn
StartHook
Static task
static1
Behavioral task
behavioral1
Sample
d520097c9a6d4b3531ced51efbbc0362_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d520097c9a6d4b3531ced51efbbc0362_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d520097c9a6d4b3531ced51efbbc0362_JaffaCakes118
Size
27KB
MD5
d520097c9a6d4b3531ced51efbbc0362
SHA1
ecbb84f794b067c10e1c26d5ba4f1f9be5e6f512
SHA256
4547c1768c9b55e90221f79063b78f27c11593d97b4a4c94cd79999ede571e98
SHA512
08068626c51408c860053ead1222314f6e504b3f50e50271cdf1c53e28fbc6a77566e833f8648adef4e09b474ba292e3c00c274821d5221f71f390f6bc4b5ba7
SSDEEP
384:ewAHxUShqujrBKnGQm9cDLfoAyqZRvPSu12x380R92HSS9m615NejgkxM+s++aJV:wKShquPB0GQpD0/+Rv6NBPh6wrccLR
Checks for missing Authenticode signature.
resource |
---|
d520097c9a6d4b3531ced51efbbc0362_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
HookOff
HookOn
StartHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ