ImaginePluginGetInfoA
ImaginePluginGetInfoW
Static task
static1
Behavioral task
behavioral1
Sample
7cdc9d8f648431e507226ef25e872b59_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7cdc9d8f648431e507226ef25e872b59_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
7cdc9d8f648431e507226ef25e872b59_JaffaCakes118
Size
154KB
MD5
7cdc9d8f648431e507226ef25e872b59
SHA1
0426de3a851d1c7648edb952697593e27f6eb026
SHA256
12c8a5315a97f9c63846fefea7122496af58b0862a4778931e69c746ba7c5cbd
SHA512
40c65101ea43cd4a0fa235e4975aeaaf3a36ac8f9547490c4c460f7b5d0395e4a316edc415811e5027d4030d54c2501084cfb24afd12d7d114bb6592a851234f
SSDEEP
3072:i5wm/8sMdVd0Ci+IT6yDY9WVqQZmQrzuaXQtOLBdb:77H0CV/y09WVDriUjd
Checks for missing Authenticode signature.
resource |
---|
7cdc9d8f648431e507226ef25e872b59_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
compress
ImaginePluginGetInfoA
ImaginePluginGetInfoW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE