StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
f02432fc05b8fcd7b0bf3401e5036f80_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f02432fc05b8fcd7b0bf3401e5036f80_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f02432fc05b8fcd7b0bf3401e5036f80_JaffaCakes118
Size
109KB
MD5
f02432fc05b8fcd7b0bf3401e5036f80
SHA1
2082e185bf68f66cdf03871bc73da0a2f6db1604
SHA256
d885ba7ffa6fad60d8fe92b6957b24f9821a85644d7f21463e273c276d65038a
SHA512
e8fa03e6dccdd195762ab03044dae3e71ee0e5546419ca47fcb71e171da9b81d406fea6646e5926f373819dbc60ed9229f32e3222aed0e5a1072d2eee7a3735c
SSDEEP
1536:eyq7QjUcBvB6KMG8eKmMdmtBkqu+n7HQreUjiBSK7Ux0Gce73oE+nrSNGZYzZ7OO:8EUc63mMi2qTHQred5Be3CS1Zix2zB
Checks for missing Authenticode signature.
resource |
---|
f02432fc05b8fcd7b0bf3401e5036f80_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ