GenerateSQL
GetQuerySQLFromConfigXMLText
Static task
static1
Behavioral task
behavioral1
Sample
03907bd3407597b904adcd1460552d28_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
03907bd3407597b904adcd1460552d28_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
03907bd3407597b904adcd1460552d28_JaffaCakes118
Size
1.1MB
MD5
03907bd3407597b904adcd1460552d28
SHA1
4e2ae3036f6d464a8e0952c7b92c06792f4d1b61
SHA256
d5d34881ea68237a187ec59b90a70bf4a7b5ebf59875757461afe110f59a2219
SHA512
0cc2cf50278f5caa22a84bf824b6995df6ed7c24fce74e240228e37b5329772a7054d621c0226e89329f3eac8a7680af79f69e226b17311f1212fc8ff0133d3f
SSDEEP
24576:BteEJoYPfVBQP1E9fwHrtRBfYhqDAx23Ha/FMiD+hc:Bt5JXfPjIHxRBfMyG2+FMiD+hc
Checks for missing Authenticode signature.
resource |
---|
03907bd3407597b904adcd1460552d28_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GenerateSQL
GetQuerySQLFromConfigXMLText
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE