EnHookWindow
UnHookWindow
fs448547aaaa
Static task
static1
Behavioral task
behavioral1
Sample
00e782bea48e9db9eb57715acb36c4b3_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
00e782bea48e9db9eb57715acb36c4b3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
00e782bea48e9db9eb57715acb36c4b3_JaffaCakes118
Size
20KB
MD5
00e782bea48e9db9eb57715acb36c4b3
SHA1
873ae3436298bb9a5de75a18ba796a47af59da7c
SHA256
577a0d6b63c1985d536458de154285b14f57c98f09c7a145b854ee72a0466086
SHA512
dfd3adec839fa3d1db26bf66a201afd59b58f5b59dea0d0396f4399c7379535e836e001ade2268c60b798bce6d72ac44e80bb251728cd3f8218c89dcef9b6d23
SSDEEP
384:39PyZNjtU2mq0IGjctOj5lkRSUetueE2j0q0zoysVrKs:3VyZ2pjn7UqpUoysVrR
Checks for missing Authenticode signature.
resource |
---|
00e782bea48e9db9eb57715acb36c4b3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
UnHookWindow
fs448547aaaa
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ