StartHook2
StopHook2
Static task
static1
Behavioral task
behavioral1
Sample
1c1119b03ece02a1610db1b6338bc463_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1c1119b03ece02a1610db1b6338bc463_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1c1119b03ece02a1610db1b6338bc463_JaffaCakes118
Size
41KB
MD5
1c1119b03ece02a1610db1b6338bc463
SHA1
e28e34f32a8f931c9e544fbf2d2358f42c28d052
SHA256
6cd9d92a725b69b22f4d052735e329e5e77c3aaba45f7047de4689daf65002d5
SHA512
65c642baa7ee3a193dc4b77d2fdb965f9f5bf32c43e3f3acd6dd7e2b00cafeaf9cbd5b773a832fee0f37fd789e4dec7038d02a03d0f956f7d275be6e0bc7cdf7
SSDEEP
768:kUtD6x+v3RazANu7DgyHGRtkgaECnb65+j6UR:HtDJfkceDgyCZaEObxBR
Checks for missing Authenticode signature.
resource |
---|
1c1119b03ece02a1610db1b6338bc463_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook2
StopHook2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ