DLLInjectedAdd
DLLRemove
Static task
static1
Behavioral task
behavioral1
Sample
185487f8b30bede4588f06096fdf83d3_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
185487f8b30bede4588f06096fdf83d3_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
185487f8b30bede4588f06096fdf83d3_JaffaCakes118
Size
33KB
MD5
185487f8b30bede4588f06096fdf83d3
SHA1
25e0180d475239b1692686a3ef95071a192cdf8b
SHA256
07620035a1d0de7ce87d36bd3926ba007068bca0d9c9b00257e7937fc40ded16
SHA512
48be5ba3fbf150d19c510601e009609bdd348896e628ecab6da220a860fd56ecac420698d7a6c3ee71962c1322c7e84a2e61ea3af6f6f0b9eaf0fece23c18ec1
SSDEEP
768:i+aoi6qZOpQB5ZpOc06HCMN9GT6RJ5BHUEy2YEZZEo:i+av6qZ4QxpP0AtNfRJ5BHxY
Checks for missing Authenticode signature.
resource |
---|
185487f8b30bede4588f06096fdf83d3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DLLInjectedAdd
DLLRemove
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ