HookOff
HookOn
StartHook
Static task
static1
Behavioral task
behavioral1
Sample
e2011e832760a0ca8f40e28054330421_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e2011e832760a0ca8f40e28054330421_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e2011e832760a0ca8f40e28054330421_JaffaCakes118
Size
27KB
MD5
e2011e832760a0ca8f40e28054330421
SHA1
4ef91e56a0285e24add89850772834260c728408
SHA256
936c53df6b962d8995e105f2c298010179394017459fbc9a45ccdaf911513b0b
SHA512
9a068bdc2940aac3754ccb8c0243cd06acaf9eb87a3116157ff1b283126ac702bfc3e3736d1c4e675a587ef8026b13da6c3e9b790b037c16614ff2bbb9570ae4
SSDEEP
384:3wAHxUShqujrBKnGQm9cD7vHj3URUE1PzMN+ocJA4IcuPRKw4GKNC63Az5UkAeZj:xKShquPB0GQJDLARU24x4IyNCt55bW
Checks for missing Authenticode signature.
resource |
---|
e2011e832760a0ca8f40e28054330421_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
HookOff
HookOn
StartHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ