EnHookWindow
UnHookWindow
fs448547aaaa
Static task
static1
Behavioral task
behavioral1
Sample
412b785531760fa09861c3f8953fcb68_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
412b785531760fa09861c3f8953fcb68_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
412b785531760fa09861c3f8953fcb68_JaffaCakes118
Size
23KB
MD5
412b785531760fa09861c3f8953fcb68
SHA1
9a5f3520c69088c12a0344c70f5a2f1939ed65e9
SHA256
fa949f57caebc3e58e8af7a311beaa161234597367c7b309327a02ce81548e93
SHA512
1601d8f6ccd54e93e746cec548dd1b9985aba8b78222fcc56b4d11d4d42679644ae64ce1494ab6cfd25138ace63e863cdf4cb996abe87c044809752422e07e64
SSDEEP
384:YPyZNjtU2mC45TiKNfRSQtzs9avZ1uwjP19EO0dTG1zEFMC13L:IyZDKBrScw0Z1uAP1sdTGpEFMCRL
Checks for missing Authenticode signature.
resource |
---|
412b785531760fa09861c3f8953fcb68_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
UnHookWindow
fs448547aaaa
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ