ProcessDeinterlace
ProcessDeinterlace_IPP
Static task
static1
Behavioral task
behavioral1
Sample
509a49702cdf08b518b2391909c05e22_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
509a49702cdf08b518b2391909c05e22_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
509a49702cdf08b518b2391909c05e22_JaffaCakes118
Size
85KB
MD5
509a49702cdf08b518b2391909c05e22
SHA1
5b88215ae61635ed48914f090a51a99c0f7369e8
SHA256
f7b36b703805221ea443fa157b47c77e5c8c57789d56e5dd032d758f6c32eba8
SHA512
4c183abf660c0fcb6eaa97ad9f21527dd15c00c0df2d730dfce070286d2316fb9bf5919f6318507b6c4b2375449fdc0f16471dfea0479d50e475d2f1f4ffecd3
SSDEEP
1536:Fdn5NbxjHJ0PlRYtQhgucYFFCL3uwr2mYns1+VYow2JnLDiaJO12Ja1VYKzbg/D:xN5HJ0PlLhgrYFGr2pnsnOnLDiH12UYw
Checks for missing Authenticode signature.
resource |
---|
509a49702cdf08b518b2391909c05e22_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
ProcessDeinterlace
ProcessDeinterlace_IPP
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE