My_ini
StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
164b98ece12ec3a3de3632df94a0173b_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
164b98ece12ec3a3de3632df94a0173b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
164b98ece12ec3a3de3632df94a0173b_JaffaCakes118
Size
397KB
MD5
164b98ece12ec3a3de3632df94a0173b
SHA1
06a5ab6ca5aec477c56021531a82d39bd8c21ddd
SHA256
5ee3b872976df27ced93a3d1de9bd7d157e085e1d542dff97c8c46191773c929
SHA512
b63f14cacbca29319199c0eefe8fc859cc9d884e8f889774f16e326a894fc0727d9c3367b4e44c7a8c2a1ee1d98a778854daa4b39e4792ad0b00ac5d68901f62
SSDEEP
12288:5Jg+daqpCTHHUy0tmWr1dTdxGmnO0ogmu:55oHHpKmQdTH7K0
Checks for missing Authenticode signature.
resource |
---|
164b98ece12ec3a3de3632df94a0173b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
My_ini
StartHook
StopHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE