EnHookWindow
SkipFireWall
UnHookWindow
Static task
static1
Behavioral task
behavioral1
Sample
5729aa28acdc21000a7ea2faffe9f6de_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5729aa28acdc21000a7ea2faffe9f6de_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
5729aa28acdc21000a7ea2faffe9f6de_JaffaCakes118
Size
21KB
MD5
5729aa28acdc21000a7ea2faffe9f6de
SHA1
91bb8fde4a5f6fdde8dde0434ebe6de36772854a
SHA256
f60c140c6afeb7dd7ba689cf830a9003e181f5ecf66ffababd196f2ffe776747
SHA512
f1c57a2fe4dcae7d4e2c5d23db59de9686cbb6833afc546f4bbc390e4fed458a18f68f9813e008e1d2ad4c9633f6605999092ecaca6f7ad4af754c8eefebd51e
SSDEEP
384:IPyZNjtU2mWUQTPo1KWLycyEn6kjrlQNxTljz1LUh1RCN/TM:YyZ6TKWuclFw51LuUQ
Checks for missing Authenticode signature.
resource |
---|
5729aa28acdc21000a7ea2faffe9f6de_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EnHookWindow
SkipFireWall
UnHookWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ