ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
18a3301e1f44bcfb350ebbc133c3c19a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
18a3301e1f44bcfb350ebbc133c3c19a_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
18a3301e1f44bcfb350ebbc133c3c19a_JaffaCakes118
Size
5.3MB
MD5
18a3301e1f44bcfb350ebbc133c3c19a
SHA1
439f8b9e18545cd4f79a3735097c87d21b903046
SHA256
40a7ca01565c88981bc18a6d1089e5a3d8f75519e3981c28dee7c6e3b563a090
SHA512
5fc7fc81f93e983e235224369ca5c450318c73151be215fe7a78cd8badc6493f92499762b3d063a494bda4b1d79c867e81a133ed2e46fe3c370ce02a160c9939
SSDEEP
49152:bHeTlP2+2MaF0UaK1Nl5YN4gZCCQCM0Cla1vrIHsKPe8FLfM9tvnq1ucKMr0+b7q:bmN2v0o7YZQCM0nkHDLXZbbdTiOxj
Checks for missing Authenticode signature.
resource |
---|
18a3301e1f44bcfb350ebbc133c3c19a_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE