My_ini
StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
10460f4877b07183d07da0e20af3eafb_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
10460f4877b07183d07da0e20af3eafb_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
10460f4877b07183d07da0e20af3eafb_JaffaCakes118
Size
416KB
MD5
10460f4877b07183d07da0e20af3eafb
SHA1
1f65b17733355444083d20adf5e643796c36632a
SHA256
d1982e8ab4733ea1cb8e7ecbbb55785e28fe13d1f4a44447763e058ba98e7a07
SHA512
a4a2a5a20d86d8196abe728cb8346b9fcf579a941f0e5636038c8ef0cfbe5854025169048221856bede0c7385677d93d24d9649dfcf9180e22bca43174b0771d
SSDEEP
12288:elVx8OKICp/6qJ4PI/1dTdxGmnOgwpIjKr0U2j:0xNKII/6odTH7apImr9g
Checks for missing Authenticode signature.
resource |
---|
10460f4877b07183d07da0e20af3eafb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
My_ini
StartHook
StopHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE