EndHook
StartHook
Static task
static1
Behavioral task
behavioral1
Sample
1597d5fe58ce8858229b36dfe17879dc_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1597d5fe58ce8858229b36dfe17879dc_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1597d5fe58ce8858229b36dfe17879dc_JaffaCakes118
Size
87KB
MD5
1597d5fe58ce8858229b36dfe17879dc
SHA1
8fa0ea9071d19ca90a09bca07b14a79b6963da0c
SHA256
f785e14c5e2a48805394731a92476b76c4420ce3088ef53e1501ab7c74bccf7b
SHA512
b58e784017ae04effc3744f67173cc9450eecf3f1abd555ee36760631029b845059e6d1c02e6241fea63c283a6e1a19f86794b85cd23a86e994bf847fa8df3e9
SSDEEP
1536:9jqjoQ3Qa9bYR0Zz2uaw91iexlsQ610thS7AYqPa8o0+TRNpZjdf9m:AoROMAzRaq1iexls510PS7AYqS8oLRNy
Checks for missing Authenticode signature.
resource |
---|
1597d5fe58ce8858229b36dfe17879dc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EndHook
StartHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ