WinOffEX
WinStartEX
Static task
static1
Behavioral task
behavioral1
Sample
f0a470380282a5f6bb621b3bc68876eb_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0a470380282a5f6bb621b3bc68876eb_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f0a470380282a5f6bb621b3bc68876eb_JaffaCakes118
Size
48KB
MD5
f0a470380282a5f6bb621b3bc68876eb
SHA1
f6fbf5ed51a11d53ae4fbbadf99c637bf78bbfa7
SHA256
e0eefcfb9c7385c949e974c41503bff79d75486dceb90b6a095e5b998251b89e
SHA512
d169f96f7419faa2266f501d258ec191d1d7612f12b57da6ee8e29efb45d4a3a2b83609cfe5a836752e6a1fb56507b9d5c262cdbcd789b73f98a606143944139
SSDEEP
768:+RiEqcQYI/u4wEcr8FhACPD+9fk0Vo3x92AhM4MxXur0mAEmTlZ:DEqcQb//RFSCPCq0VWjyeWE
Checks for missing Authenticode signature.
resource |
---|
f0a470380282a5f6bb621b3bc68876eb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
WinOffEX
WinStartEX
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ