estableceproc_dll
principal
Static task
static1
Behavioral task
behavioral1
Sample
17bb4c9f5b6a86d8311b02b52289abe0_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
17bb4c9f5b6a86d8311b02b52289abe0_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
17bb4c9f5b6a86d8311b02b52289abe0_JaffaCakes118
Size
56KB
MD5
17bb4c9f5b6a86d8311b02b52289abe0
SHA1
4036b5b5eb80d48de356ec85e23f792e66f40c6b
SHA256
d8bc87f5377c9ea4058c24841d1298f143a5551e34f2e349582ffe51584bce40
SHA512
1749a516638543fe0c6f30a3734467482331cdda150d3a997964af940eb8d0603dd28929a607c608f4ae2620ba244db8e176b0ac4f4eca57b8f9ba5b20e63569
SSDEEP
768:7WroGgJY4SeDLCju7O87lXzuwBE1v3cwB355pPdgICoeaPqwpyes93aZ/jwlHiY9:quJgo1ATFehA/U
Checks for missing Authenticode signature.
resource |
---|
17bb4c9f5b6a86d8311b02b52289abe0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
estableceproc_dll
principal
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ