JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
1c5077ef3c0d631ff675f2fbc3f5138c_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1c5077ef3c0d631ff675f2fbc3f5138c_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
1c5077ef3c0d631ff675f2fbc3f5138c_JaffaCakes118
Size
159KB
MD5
1c5077ef3c0d631ff675f2fbc3f5138c
SHA1
d6052c70f46f895fe8c40bbc62216be0a91c4a8f
SHA256
fed2b6023eaca81e05a88c400c61d10f028ea9ea32a4b7b045fb6da57b54e88b
SHA512
39bdca9d83f2140646d00fc897e72f700075564defc161d88df99d18d1f64bfd856d686ecd29699598ade818fab7775bb6d748044aa072ba9e06c6e2a79d3d19
SSDEEP
3072:TgIwVgpKpXniDX18OwBfXRG7jXEjUGQbx0zJL3Xr4zgnqBwEpteR:TgiKRniD18OQfcnqUGQbxWJL34gnQlpc
Checks for missing Authenticode signature.
resource |
---|
1c5077ef3c0d631ff675f2fbc3f5138c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE