StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
061cc91c9b4c0a5a80d6868cbaede7cc_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
061cc91c9b4c0a5a80d6868cbaede7cc_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
061cc91c9b4c0a5a80d6868cbaede7cc_JaffaCakes118
Size
46KB
MD5
061cc91c9b4c0a5a80d6868cbaede7cc
SHA1
4d4de8f05dd71a49038935dd1a75cf8b79037ecc
SHA256
f4cfe60aa3357085b0d6a63b803750db826afbabba33ee0b42b10515fd707f3c
SHA512
c2b80061a7f557e56c9838ffe6ce58b10e64e76a8b22ab1768828e85a53200ee1a7cd4d0e833b99de549db75df026df3ce5a602c5aaace5f7c148ec685102cc5
SSDEEP
768:ry5qsmQiwyP6ZodLNB9AClhPR5h+IKnQKWeldrQamE4c44BtQfNXYf3HD8x:e5qsmQpad+CDh+InKWelNrmzmyVof3HS
Checks for missing Authenticode signature.
resource |
---|
061cc91c9b4c0a5a80d6868cbaede7cc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ