EnHookWindow
SkipFireWall
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
3902beb5b025d9d48ef0e7b21ad9fc9a_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3902beb5b025d9d48ef0e7b21ad9fc9a_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3902beb5b025d9d48ef0e7b21ad9fc9a_JaffaCakes118
Size
22KB
MD5
3902beb5b025d9d48ef0e7b21ad9fc9a
SHA1
5f9d5304e2f6c6a905197d15c8bbd090e4effdd3
SHA256
2480077b034ad5516948b4db4cee73a57da2a0da74596116d2010f84d7b98823
SHA512
8c3a3576441698417ab072b42d348247de0c1b5418ee277e38c50b1b1055f004c87c1a20c64e470f2bd565f5046da3dfbf269b56fbccab7bf6bdd641a19ef9da
SSDEEP
384:ePyZNjtU2mWUQTl0oxwhE7dNYU2FVjF/fcTljz1LUhsVoAffX:eyZ65OhNYZRxK51L/VoAX
Checks for missing Authenticode signature.
resource |
---|
3902beb5b025d9d48ef0e7b21ad9fc9a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFireWall
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ