EnHookWindow
Skif4freW4ll
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
d5e09bac16eeb127d31789f0a90bf2a6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d5e09bac16eeb127d31789f0a90bf2a6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d5e09bac16eeb127d31789f0a90bf2a6_JaffaCakes118
Size
18KB
MD5
d5e09bac16eeb127d31789f0a90bf2a6
SHA1
6e524268e4dc9101af9079727ff7685a29de7ff3
SHA256
fcb751d085ba99b0e8f109698525d77e519a80a9415d177a9f44334fecde8856
SHA512
160d2c91dddd4b9b76b20e3c4de6bcc6f2e7fef0268c191137a25d675c6ab1a41f014b112fec25da47e1ff332dd1a2c7ec1101aee39ee071fcccf158df05b086
SSDEEP
384:lau0NKw9NYQgQnZkpwFuDeqjtscz1tcYYOx9l1:Eu0VrZxkec1tqo
Checks for missing Authenticode signature.
resource |
---|
d5e09bac16eeb127d31789f0a90bf2a6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
Skif4freW4ll
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ