ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
0ccf69d60d3b86c3968c7b778e56f3b4_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0ccf69d60d3b86c3968c7b778e56f3b4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
0ccf69d60d3b86c3968c7b778e56f3b4_JaffaCakes118
Size
5.3MB
MD5
0ccf69d60d3b86c3968c7b778e56f3b4
SHA1
4b953589ffea207d538e3d5a9db98598092223b0
SHA256
c834e9ec5b95e695181a4123c022a19127d6aa94660525de011842323b1e7a6e
SHA512
b5eae23d812c12b989f705ab2f406a15ef3174c6f583081e7b1ba4c9adeb91f388cae97e1fe8b38b8409d1e7f3e669df3e16dea14903bb2ccb0cb554123505c6
SSDEEP
49152:bHeTlP2+7MhF0UaK1Nl5YN4gZCCQCM0Cla1PrIHGKPe8FLfM9tvnq1ucKMr0+b7c:bmN7u0o7YZQCM0nkRDLXZbbdRiOxj
Checks for missing Authenticode signature.
resource |
---|
0ccf69d60d3b86c3968c7b778e56f3b4_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE