EnHookWindow
SkipFi2eWall
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
028b9cc94754dbd940361440da12f7ee_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
028b9cc94754dbd940361440da12f7ee_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
028b9cc94754dbd940361440da12f7ee_JaffaCakes118
Size
20KB
MD5
028b9cc94754dbd940361440da12f7ee
SHA1
17dd0d9552c9a8cc2dc251400139b25c4df7f83d
SHA256
d260a37113609665ca4ac30ac0da050c81d4d2b3e111293030df938e62476800
SHA512
455a5db3d8435272acb739e4c70d7539c29dc2b11ee1396bf4475c9a1ed6d17a76aadad2962d637270406577abc6bea910c29c3c9ae2847754451bb5c3fa562a
SSDEEP
384:TPyZNjtU2mW5j4ygqHac34XvTPkM1Kj4z1iV/zv:byZ71gGD4fTxKY1iVb
Checks for missing Authenticode signature.
resource |
---|
028b9cc94754dbd940361440da12f7ee_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFi2eWall
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ