StartHook
pt_ksHook
pt_tzHook
Static task
static1
Behavioral task
behavioral1
Sample
0a885fc12ff6c3c63e1e99b839a1f567_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0a885fc12ff6c3c63e1e99b839a1f567_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0a885fc12ff6c3c63e1e99b839a1f567_JaffaCakes118
Size
48KB
MD5
0a885fc12ff6c3c63e1e99b839a1f567
SHA1
8c7b3d280a1f1f26b2006c9608c86425e5cad4a2
SHA256
edc56384cabddceeb7252e4e48a80b52504a30bc2d863ea1ecd7fe1d0465cdb3
SHA512
49c37e0bb36b9342deb8c3ee7a8020998d949f7cc3782104d628fec9976fa4aa84c8a9cd249e2361f0e632ee9b35e8e8e49a40115aa88f44da1090dbdc7c11ee
SSDEEP
768:6Zz+YWP8tiXK57TDr4ZExNmQDvr9n/HSJugt0ymT0iqw/ejf6q1:6ZzBWUtiadTPRjhaugt0lqw/
Checks for missing Authenticode signature.
resource |
---|
0a885fc12ff6c3c63e1e99b839a1f567_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
pt_ksHook
pt_tzHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ