WSPConnect
WSPStartDown
WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
f85fb65dabaa98f1483eb8ea50a8d352_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f85fb65dabaa98f1483eb8ea50a8d352_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f85fb65dabaa98f1483eb8ea50a8d352_JaffaCakes118
Size
36KB
MD5
f85fb65dabaa98f1483eb8ea50a8d352
SHA1
8b1408b269470df9a636e50756d4f72d42dcb315
SHA256
a68ecc19ae5444c315cb8e8457e4bf8b09ee9c5a400cbc9f3e0a17cf4996c4de
SHA512
027b4097012c30551f8d3231d1a941bf526bef8544621cf9a2a33b7e6b04b9a5ab423daf9bcca04a0f688397d01ceed39e828318c2ca19d429a694793c6c3f02
SSDEEP
768:InWr2GpDfnV3lyhBZnOz/QhnZhep3AGdGOH63v:Im26r3yhjnOTsZheiGkOgv
Checks for missing Authenticode signature.
resource |
---|
f85fb65dabaa98f1483eb8ea50a8d352_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WSPConnect
WSPStartDown
WSPStartup
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE