EnHookWindow
S45pFireWf4l
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
00ee109512256ddd5920ca89bf09d577_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
00ee109512256ddd5920ca89bf09d577_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
00ee109512256ddd5920ca89bf09d577_JaffaCakes118
Size
1.0MB
MD5
00ee109512256ddd5920ca89bf09d577
SHA1
2a6284eda81f9ba8f1b6d2269e24abe0b16e71c5
SHA256
15576c40b6949e413715ff52526bc91c09acc68120fb42113f2faa4f6bfff4f4
SHA512
fd20c732656e6e79f995e26e2630ca2015f1641466cc676d3698657e307e84b4b8bb662dceca14a5112cef42879ca1481c1ba31677edfae29954e43d7fbc9bf6
SSDEEP
384:uPyZNjtU2mO4MECuEjguxXtCldoEu1bjOCzElenHEJ:OyZvECu0iu1nOiElenHe
Checks for missing Authenticode signature.
resource |
---|
00ee109512256ddd5920ca89bf09d577_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
S45pFireWf4l
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ