ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
0f9720dc6b3622160031748e24ce6671_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0f9720dc6b3622160031748e24ce6671_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
0f9720dc6b3622160031748e24ce6671_JaffaCakes118
Size
5.3MB
MD5
0f9720dc6b3622160031748e24ce6671
SHA1
f92f4c8d5eda5003f2c432658cf1d76a54a99194
SHA256
1f58175d296d319a9c900f8c7a9cd44ad62ec9619c1d2654da03a3856bb01751
SHA512
1eaec130fa8db2b54fca1f3b155b1e8ac2c11038b933eab08a59625d3d700611afe3aad70b30495eea7ec64eb3d07b08d6c3d98b05fb2933dee78ca7b906a225
SSDEEP
49152:bHeTlP2+7MhF0UaK1Nl5YN4gZCCQCM0Cla1PrIHGKPe8FLfM9tvnq1ucKMr00b7u:bmN7u0o7YZQCM0nkRDLXZ5bdHiOxj
Checks for missing Authenticode signature.
resource |
---|
0f9720dc6b3622160031748e24ce6671_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE