BhoInstall
_WorkProc@4
__mp@4
Static task
static1
Behavioral task
behavioral1
Sample
1c0a0ae6a406aa787501a21c709657fe_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1c0a0ae6a406aa787501a21c709657fe_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
1c0a0ae6a406aa787501a21c709657fe_JaffaCakes118
Size
50KB
MD5
1c0a0ae6a406aa787501a21c709657fe
SHA1
5838433833ebf716f2323347ffd3b7e4926ec7db
SHA256
8272b83ffca7c3fbbb1a2b395d563b84d1620eea839830a754419b8772b17592
SHA512
85764435aad545c23c033187d26bce0d7bf7f55254fa1c8fe8626418510ecc95c584d741cad0ccc6f9057a85acd346544fe162f1848d2095e5bca2c49e1c3b6e
SSDEEP
384:SisDfjoDOMTbWQFm54NZ0Rwmsylipb2QMbjYspOQ+dSckNiIrVzyHr:ejoqMXLp+RRmb2HbjzOQ8ScqiIrVzyHr
Checks for missing Authenticode signature.
resource |
---|
1c0a0ae6a406aa787501a21c709657fe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
BhoInstall
_WorkProc@4
__mp@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE