InstallHook
InstallMyDll
UnInstallHook
Static task
static1
Behavioral task
behavioral1
Sample
a6f5c3800c67d685f0761290488c144c_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a6f5c3800c67d685f0761290488c144c_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
a6f5c3800c67d685f0761290488c144c_JaffaCakes118
Size
456KB
MD5
a6f5c3800c67d685f0761290488c144c
SHA1
da6db73761950b7c4a9e1dc971638dcfc5f5228f
SHA256
599f0fa8cf531c55fc3220c8cbda90b3dc156e7a86cfcf69786b3be12f0a052a
SHA512
93197553e7aebb148eebd74467aee048b4c6c96a75c1eeb1948eea74867f662061dc16614d9535bd256897625df9f5b70be4651e7b441e07fc94e39379bda548
SSDEEP
6144:HeN5K3M2dvyNGNkKnqHkL7Dj9IcB0qW3YLqKy16tkvvf23SaINGTIgq:Hp3M2MSm0Xj9J0qi8qUtkvAINZh
Checks for missing Authenticode signature.
resource |
---|
a6f5c3800c67d685f0761290488c144c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallHook
InstallMyDll
UnInstallHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ