MsgHookOff
MsgHookOn
Behavioral task
behavioral1
Sample
f94f17ecddf492a4b67ca8cf4046ad9e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f94f17ecddf492a4b67ca8cf4046ad9e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f94f17ecddf492a4b67ca8cf4046ad9e_JaffaCakes118
Size
23KB
MD5
f94f17ecddf492a4b67ca8cf4046ad9e
SHA1
11bd42b8862a0db3abf29e01d797e125d711e526
SHA256
1366a85d3b8371d3073a710b19b38a3871569f157dd37fe916fb621eea5f2367
SHA512
548dcab1f3eb46f4072f65aae99c4b2c388829ae911c43757a3158302d864a7c75b300742804129ef046ed98d857b66965382bfd24a66cb3b31257036fab6235
SSDEEP
384:jjaUxz0ClwXqd+1egQKZryiH+Af1Rc8KgGwysAzmPAA6ytB5e:aRCl+qdSHQOuM+Af1lzyBmnj5
resource | yara_rule |
---|---|
sample | modiloader_stage2 |
Checks for missing Authenticode signature.
resource |
---|
f94f17ecddf492a4b67ca8cf4046ad9e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
MsgHookOff
MsgHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ