EnHookWindow
UnHookWindow
f45678912000
Static task
static1
Behavioral task
behavioral1
Sample
090dc62609f9a42a474d463f5fe74ee8_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
090dc62609f9a42a474d463f5fe74ee8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
090dc62609f9a42a474d463f5fe74ee8_JaffaCakes118
Size
20KB
MD5
090dc62609f9a42a474d463f5fe74ee8
SHA1
592fa88d67c9282a444c25074dcadc6c04456abf
SHA256
df1ca88f3922535beebe97645c6bf6f4b78aff939555f37cc01d2ce6b0a65a11
SHA512
889e2e39b939d6eef996bf8e8f5625ccb486fb041bccf6e108315a89beb34e44c43c55257218b86b4467be1d717d668b8b74db54afbaf75759a058850e568d90
SSDEEP
384:sPyZNjtU2mHIws7pQAVyzkU9f7ypPqmKjcKjtzEiqT7QP:cyZWYdyzkT9Kc6hEiuC
Checks for missing Authenticode signature.
resource |
---|
090dc62609f9a42a474d463f5fe74ee8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
UnHookWindow
f45678912000
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ