EnHookWindow
SkipFireWall
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
f0935ffb21afac25935eda6da9e8ee4d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f0935ffb21afac25935eda6da9e8ee4d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f0935ffb21afac25935eda6da9e8ee4d_JaffaCakes118
Size
21KB
MD5
f0935ffb21afac25935eda6da9e8ee4d
SHA1
e9fc363daf51085e1e6127fb43d557aaec93e9b4
SHA256
1157b5d0164c5691d4dbc801d2a9c296564c6a85fb97b6302d80f7020cfe7fd4
SHA512
64a00a04a456200ec8d8b901fc9f97581867a4960f60eeb6633338d62593f91c14f6cdacb4a1238926c92b4b027237286d7a9e87e917d16970a798494bee6271
SSDEEP
384:jOr5NKZ2qE4VpRE3aYr6W4A+EDmi95OBHxy45XAwEitTaj7w9sGzEdtYYOAF:qr5NmphxQ39YBHx5XAI967wzEdB3
Checks for missing Authenticode signature.
resource |
---|
f0935ffb21afac25935eda6da9e8ee4d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFireWall
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ