ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
04a89cc67b4f4ca5a7eb2d4653a8213b_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
04a89cc67b4f4ca5a7eb2d4653a8213b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
04a89cc67b4f4ca5a7eb2d4653a8213b_JaffaCakes118
Size
5.3MB
MD5
04a89cc67b4f4ca5a7eb2d4653a8213b
SHA1
28be86b43efa37ef6b46cae31e488184057cd66f
SHA256
d058a97d9e515c8296b891e0a2c2933fee53b9fd52c58df9cd97166027856153
SHA512
ae09749b94ca26c1fa23ee7ca1c2b2d5c1aebed2dd4f8b7cdb9f5f53cd38730ce3b0f94869da62048fb00f31a8bac3cc776c6363d15fad449dd7509ace1b7120
SSDEEP
49152:bHeTlP2+/MsQ0UaK1Nl5YN4gZCCQCMECla1qrIHs3Pe8FLfM9tvnq1ucKMr0+b7k:bmN/U0o7YZQCMEi8oDLXZbbdpiOxj
Checks for missing Authenticode signature.
resource |
---|
04a89cc67b4f4ca5a7eb2d4653a8213b_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE