My_ini
StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
0f030c57e8e501e10c70f6df3410123e_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0f030c57e8e501e10c70f6df3410123e_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0f030c57e8e501e10c70f6df3410123e_JaffaCakes118
Size
397KB
MD5
0f030c57e8e501e10c70f6df3410123e
SHA1
927388434a085595b9d7c5455764cbb72ee81c3c
SHA256
26f0ee82084c1c56ac196f4e9bdf1385b91889bf1b7568992265c46282e40581
SHA512
970cf2ba653edf80d61c13f739e9f984037d912d216edefb3038c32b4bcf8488d7d5e90858ddac1b4a1aac88c37746fcddc68de6ae18958fa138595f7f81f5c4
SSDEEP
6144:U9+jyg9VQXcVoFj6Wd1b+7DbWVeUPCW3e0dZfFgCZTdsmnElezyi8JAIn8ovVp+b:hzVQWodMXWht1dTdxGmnO/i81n8B
Checks for missing Authenticode signature.
resource |
---|
0f030c57e8e501e10c70f6df3410123e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
My_ini
StartHook
StopHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE