StartHook2
StopHook2
Static task
static1
Behavioral task
behavioral1
Sample
18f38089ab5c85bfcabebaa90827ac3c_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
18f38089ab5c85bfcabebaa90827ac3c_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
18f38089ab5c85bfcabebaa90827ac3c_JaffaCakes118
Size
42KB
MD5
18f38089ab5c85bfcabebaa90827ac3c
SHA1
b2c5caa5001cec885e319421939bd9a14079dd42
SHA256
dab63e7f6519d5448653de828860e690adf752bcf236b033560fbee75d9b3f8a
SHA512
c0a32a7d1f84a52b8a631f7ab735753224c53e144e6fe6d3049a685d1de7299f645697ffb845748e326c20d3273a023c0d92fb11d304610e2ea6e30c20b2cc1e
SSDEEP
768:kESx8dHtFSGb9xGZKHIgTLNGAzRumr0iFj5TMjDtCMKX:PSx8dPTXoKnD0iFMhCMKX
Checks for missing Authenticode signature.
resource |
---|
18f38089ab5c85bfcabebaa90827ac3c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook2
StopHook2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ