HookOff
HookOn
Static task
static1
Behavioral task
behavioral1
Sample
fa4d25b005367df683cc65782c702c81_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa4d25b005367df683cc65782c702c81_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fa4d25b005367df683cc65782c702c81_JaffaCakes118
Size
86KB
MD5
fa4d25b005367df683cc65782c702c81
SHA1
4a6d71d21a02c71e7a12a3d316a35dedc0895416
SHA256
a6d00b44273971f8beed2526a605a82e7613d2e602be3695b31a610ef5037953
SHA512
cb6c9b8f17f5a5fd3e24bb6c67cfa2dc8849a3fc074a42c01aa5d105ef0791936f016f02a6f5e8fb7d7782a03ba362d59be0acada1aeed0b1f3e1b341cdb30d7
SSDEEP
1536:zjqjoQTOKuovZmxi0Wi264u1NdnZQLeePtRDIAlW66b4Iy67sgEiiTLZOa9:OobtgZ/0W96t1bnZQLeePtRDIAlW66bK
Checks for missing Authenticode signature.
resource |
---|
fa4d25b005367df683cc65782c702c81_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
HookOff
HookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ