Hookoff
Hookon
Static task
static1
Behavioral task
behavioral1
Sample
25e6ec3785ff9e74df1ec7435da4b257_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
25e6ec3785ff9e74df1ec7435da4b257_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
25e6ec3785ff9e74df1ec7435da4b257_JaffaCakes118
Size
33KB
MD5
25e6ec3785ff9e74df1ec7435da4b257
SHA1
291a4a3e5a8b722d4776e719a87eda04cad7ceb2
SHA256
7de7b3a667a2d9db7e41e61c480e6db18c065a81e578863b76d9a318890dc0b2
SHA512
52c9c45e87f983366f5287fe5264936510d3ba9e5bb8d1f5d398fc9bf6fa6f1c2d2e7f3de051d3fe5c110f4f83135e5c611578fc21fd9cceaf2ba7d7dfc64cb2
SSDEEP
768:hBe+Wqy1szYbuO5kAMoQfG2OOiFI6DXfjV+:hkhqy1sQ55YfGpdFL
Checks for missing Authenticode signature.
resource |
---|
25e6ec3785ff9e74df1ec7435da4b257_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Hookoff
Hookon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ