EnHookWindow
SkipFif45all
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
0025dbd0cc3992bc48eec9714e29b2bc_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0025dbd0cc3992bc48eec9714e29b2bc_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0025dbd0cc3992bc48eec9714e29b2bc_JaffaCakes118
Size
22KB
MD5
0025dbd0cc3992bc48eec9714e29b2bc
SHA1
96e9c20f80f43febb3440406ccd239884d7518ac
SHA256
0b0c3bc941271383632acd3e9548f9094f38360ee82a431d482e61288051e18a
SHA512
268a3ac6594c2be36262724a01ef6b19a76cf608926bd577e8c212a0ab8af2a646ebad3b32be87bebc711dc2ba69793ef4c3b218cec25f38244c3b0aabe09110
SSDEEP
384:6cPyZNjtU2mmQgAL4Dy43NH051KSjjEE/7u/zXZTDzI:nyZur4B92KYEETuLXZTDc
Checks for missing Authenticode signature.
resource |
---|
0025dbd0cc3992bc48eec9714e29b2bc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFif45all
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ