StartHook
StopHook
pt_ksHook
pt_tzHook
Static task
static1
Behavioral task
behavioral1
Sample
43e838031122f7d010141ecfbcd02a4f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
43e838031122f7d010141ecfbcd02a4f_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
43e838031122f7d010141ecfbcd02a4f_JaffaCakes118
Size
41KB
MD5
43e838031122f7d010141ecfbcd02a4f
SHA1
4a5d24e74b777eabf908679f33d9de7864281adb
SHA256
5da376a35acf9370e6734f38ef447eab9496bd5a4993ac30eaf156ca2c5addd8
SHA512
db0232b97021ee3d82383db0214b4e78c5465ecc789b227fe193c4266c40d60c534b0e7a163b094af1b411f603b4adebb1d15065998ee61e315ff34d0afc9519
SSDEEP
768:zalXn/GXga7+9z242qf1TMU956+K+3/vMoOfLiMc2dEyv6QK6:zg+XglR2bq1TMU1UoOfLc2rf
Checks for missing Authenticode signature.
resource |
---|
43e838031122f7d010141ecfbcd02a4f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
pt_ksHook
pt_tzHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ