ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
14fb6d4f20e8bfc48f81764d04b29573_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
14fb6d4f20e8bfc48f81764d04b29573_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
14fb6d4f20e8bfc48f81764d04b29573_JaffaCakes118
Size
5.3MB
MD5
14fb6d4f20e8bfc48f81764d04b29573
SHA1
ab62dcc14935b754df37f26c89a8279a91f14977
SHA256
1eea01fd03e64795abc1ac4a9b6497f0b335ed6c95949d8c861dbbd038a009c6
SHA512
6eb190e5edc84c436a868a9a3b60d0153db0ac7b5e60e4ca09054d98dd880f5e654de5c32c89224ba973044b99d140c133971725259a63e2f0592290842d2cb6
SSDEEP
49152:bHeTlP2+2MaF0UaK1Nl5YN4gZCCQCM0Cla1vrIHsKPe8FLfM9tvnq1ucKMr0+b7Q:bmN2v0o7YZQCM0nkHDLXZbbdliOxj
Checks for missing Authenticode signature.
resource |
---|
14fb6d4f20e8bfc48f81764d04b29573_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE