EnHookWindow
SkipFif45all
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
0309be0b358c1f65e1261444865659a7_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
0309be0b358c1f65e1261444865659a7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0309be0b358c1f65e1261444865659a7_JaffaCakes118
Size
22KB
MD5
0309be0b358c1f65e1261444865659a7
SHA1
d852e2a57cadc65c7e7bb0abe26fd550d9207069
SHA256
e455f802581f211f319d1174be05525966851ff00bec857c3aff6a95ad0ebd6e
SHA512
bc3176240aac50ff3ead7398bfca3ac22ac8e722007e683ad36fd6c1dfc58f660b1d93ea208edca66cd334bf5ffa45e0da72aff599363df39f5fbed6ff80df48
SSDEEP
384:JOr5NKZ2t1IznGHhZ2JSqsdowCaNUAaU6jAnxBpzxuTYYOwaPa:Ar5tkoMwCE9ax4xuLmi
Checks for missing Authenticode signature.
resource |
---|
0309be0b358c1f65e1261444865659a7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFif45all
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ