SPIHook_Free
SPIHook_Init
WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
2a09e83bd1530510dcc54365eb737168_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a09e83bd1530510dcc54365eb737168_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
2a09e83bd1530510dcc54365eb737168_JaffaCakes118
Size
27KB
MD5
2a09e83bd1530510dcc54365eb737168
SHA1
5c23fc2915ae2f0ab7f40284eb10ccdc64643127
SHA256
3db5bae692d534c737790df95cb4bfc9dc49568599b526f1531676c7e6402ea7
SHA512
a87aea60cbd1a08c4c92c5ae5441dcfb84a9e083a9ca06345f603b0edce4a4dec8f91014b710a5d5bd60909e422d1660f16b2b23788ff11dcae62ea3647eeef7
SSDEEP
768:7a+Bqhe1szdLUYbAQKDQb32m3LUudI1bI:7RBqk1sKr8bv778U
Checks for missing Authenticode signature.
resource |
---|
2a09e83bd1530510dcc54365eb737168_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
SPIHook_Free
SPIHook_Init
WSPStartup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ