My_ini
StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
0459641d572daa2dc5418ad0bb55dfaf_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0459641d572daa2dc5418ad0bb55dfaf_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0459641d572daa2dc5418ad0bb55dfaf_JaffaCakes118
Size
424KB
MD5
0459641d572daa2dc5418ad0bb55dfaf
SHA1
011540ebe7982b9ae5ec866555dce99987ddd122
SHA256
c18025fe58bc2c13a44d3e1d612813bf006a8036af7c0ced76487021ab2b835b
SHA512
6e48479be6e5d7f6de35227baa26b6cdd105f3c9d0a6d3585d565ab61069af17b99b13b7ef2707e7a6b7239388080de9aadbc23ea55cb6d67eaf6b9d836684c5
SSDEEP
12288:pKkewsOEm+ctiMTH/1dTdxGmnOCXAsUKH8zlg:pKysLmF3dTH7RNH8S
Checks for missing Authenticode signature.
resource |
---|
0459641d572daa2dc5418ad0bb55dfaf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
My_ini
StartHook
StopHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE