TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
90cec01d72726cfd4e6edb0df589fcf4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
90cec01d72726cfd4e6edb0df589fcf4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
90cec01d72726cfd4e6edb0df589fcf4_JaffaCakes118
Size
3.6MB
MD5
90cec01d72726cfd4e6edb0df589fcf4
SHA1
ae2a3e93342fe7f4517ec5d4d8451a55a6bf950c
SHA256
25229f5e5d64bf4a9bba9ac42410697dc7329dfb6a2357946a4dc33f46a44f06
SHA512
1fa43f045b399e47d3836008eb8db0a6e085127df5538db202e6263a7a33c9f4eea7235525776348d316aba050032c23180f521c4222ba677b0ddc42f462f26d
SSDEEP
49152:+lBYMpTFCSdQ10f8A0gGq3bLoPRA/eL7UtTAaKVN:AG4RfKgf3bLoOeL4Kf
Checks for missing Authenticode signature.
resource |
---|
90cec01d72726cfd4e6edb0df589fcf4_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ