StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
f0eb9c36f1ca773c9b93c8a87eee1538_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0eb9c36f1ca773c9b93c8a87eee1538_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f0eb9c36f1ca773c9b93c8a87eee1538_JaffaCakes118
Size
18KB
MD5
f0eb9c36f1ca773c9b93c8a87eee1538
SHA1
9f5bce45ce6291790a16a1be576636256f91ee43
SHA256
32d89f5a320e5a5e8084105831f8d323488c54f214ec3e436e294ffda69d2d4d
SHA512
1f7545520a1648b5a34845aeab76bfe5341fe54bf148d6e623bfddbb5cf0b76329a3c57951ba6511582c07f04cda7d35602d5827b7323acff44c263de2cca19a
SSDEEP
384:B5RdCysMqlW3mQ26N7oKozhhPAX6pm/T3:/CyZqlSmQ9xCGr
Checks for missing Authenticode signature.
resource |
---|
f0eb9c36f1ca773c9b93c8a87eee1538_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ