CF
GetStat
HM
SetInfo
SetPID
SetPName
SetStat
SethWnd
Static task
static1
Behavioral task
behavioral1
Sample
1552b886dab4168a4011422cc781d587_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1552b886dab4168a4011422cc781d587_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1552b886dab4168a4011422cc781d587_JaffaCakes118
Size
571KB
MD5
1552b886dab4168a4011422cc781d587
SHA1
4768843a3bf748a5f089311d2729bd42068bca15
SHA256
9d825ed094aa540ae772512ea9b54061dd1aaf74cee0653b3ccbd244bb4e8064
SHA512
df776460523ce33daa307202873f81cb9703b5beb5261932b5263c28db74b6fc556b5d9b8a4f0c08c21beefecbec3359403c8ad074330567ef31314168053967
SSDEEP
12288:gNX5CeEt2UxdWUkvWgf5nLvWqz4egvaag8mW5Y/miQ5qIrbuo/iIxfi5gX7q:gNpGt2SWUkvNLvA5yKmWG/Sdrbuo/TxY
Checks for missing Authenticode signature.
resource |
---|
1552b886dab4168a4011422cc781d587_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Module32First
CF
GetStat
HM
SetInfo
SetPID
SetPName
SetStat
SethWnd
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE