StartHook
StopHook
findwindow1
findwindow2
Static task
static1
Behavioral task
behavioral1
Sample
efed3b16998c77a786f91e84e76c52a9_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efed3b16998c77a786f91e84e76c52a9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
efed3b16998c77a786f91e84e76c52a9_JaffaCakes118
Size
30KB
MD5
efed3b16998c77a786f91e84e76c52a9
SHA1
da6dbcbe3f17974d72f8ba4318cf9d9169995c76
SHA256
d2e0841054c723b03747ab5b99b4b13ffe651db5cf51bfd77488adf3626de81b
SHA512
6cf7f3b8c98e174ed4755bd68e4b5a4e4e15e336a3ec3df060980784a1b654bda5aad1523833753585b92e7ccc3e705a7709bcf67b4bac6e768857f53c48e061
SSDEEP
768:k+qtT71EfGZK5WmrePjQWWgfiEhE7CIF/rsYQkKJo2OhiT:klpo0jQ4fVOuYQ3dOhiT
Checks for missing Authenticode signature.
resource |
---|
efed3b16998c77a786f91e84e76c52a9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
findwindow1
findwindow2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ