StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
eb150182bcc56d1fdf038e76f11cd3dd_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eb150182bcc56d1fdf038e76f11cd3dd_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
eb150182bcc56d1fdf038e76f11cd3dd_JaffaCakes118
Size
24KB
MD5
eb150182bcc56d1fdf038e76f11cd3dd
SHA1
99d84bc5ceb918116856b35357367c76d2c2ee4f
SHA256
09fa8aac92fdb604837653a25502d247f34f981d4156f0bb923f5c9b4bbbacb6
SHA512
2b0da3177a803cb6b74325f82a767dfa7cf02af241bddeaa80dafcfb6000bf64ccf61087455ae0520ac8b23280775cd7f0566a80fa5228f9d68f8198c3632ae3
SSDEEP
384:9Pbdxz0Cv0hqd+1TjQmrdii7mFBoORZocwjmcBtZi21UH1/CE82YaKAzKAaJgS:9YCvsqdS3QksPF/wn1MdLtK
Checks for missing Authenticode signature.
resource |
---|
eb150182bcc56d1fdf038e76f11cd3dd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ