StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
240c449235c7c742cf8cc6b0adf05e17_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
240c449235c7c742cf8cc6b0adf05e17_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
240c449235c7c742cf8cc6b0adf05e17_JaffaCakes118
Size
34KB
MD5
240c449235c7c742cf8cc6b0adf05e17
SHA1
df5022e8baaac455b40d6dc7fef2026c17277b3f
SHA256
157c327a878c1a59aa6794361a1fac6c5684f9c2c7143c629c38b1fa40af5c69
SHA512
954d480fdb5bbe1f3b706ac0395bad5321033ece3266e41288f93eb59ee242b06dae76bae26ad02c1333e565e5b1697d6e5e3598e4c5339883a1ac8aab4365ad
SSDEEP
384:gGszn7e8sWegCefQupYTj0R8BWzWNp7T8pbn+cqbPUVm8PoijAee2/06g9Ea4Qn5:gwWefS3GWSzWr3XVm8wSeRdkIK61dcu5
Checks for missing Authenticode signature.
resource |
---|
240c449235c7c742cf8cc6b0adf05e17_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ