My_ini
StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
0aa9d763713996a2391dc393ef73274b_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0aa9d763713996a2391dc393ef73274b_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0aa9d763713996a2391dc393ef73274b_JaffaCakes118
Size
418KB
MD5
0aa9d763713996a2391dc393ef73274b
SHA1
c8ff37c1b98b9073ee30f83a20a7953087c0e2ab
SHA256
e8c831c7140226ec639c0ffd1295894250077db3ddcfde2c86f36e43c28c757a
SHA512
4def57e056d698b55fbcc4b3065c46f46d3b8684f0a01518ef0244466f0e097c14b14dea238031af4035767e2804bfa6ae65cba1872d5f6ed5b274e2fea04225
SSDEEP
12288:TUuPu9RrboaOxi8seXLK3MRzf1dTdxGmnO7aV+h:Tm9RrboaOxDscL+a9dTH7KaV+h
Checks for missing Authenticode signature.
resource |
---|
0aa9d763713996a2391dc393ef73274b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
My_ini
StartHook
StopHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE