Hold
Init
Install
Logon
Static task
static1
Behavioral task
behavioral1
Sample
2a5f9f0a54afcc2844eec6f6713f14c2_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2a5f9f0a54afcc2844eec6f6713f14c2_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2a5f9f0a54afcc2844eec6f6713f14c2_JaffaCakes118
Size
80KB
MD5
2a5f9f0a54afcc2844eec6f6713f14c2
SHA1
eefb18c174560eaad67981f07c1716aea8f69f5e
SHA256
f63d491ff6d778c7b9b2218982fb304daa8960de3ab4ee72f4c227cd5b93c4a2
SHA512
099c893ecd1bcce9362be651c2eb2b5a15fe847c91695609a431c9608e0a3618978fa94805d2aafc9761fa441bd810636719e74d25e09a10b1f39bb66d56d695
SSDEEP
1536:LvJq/zSQfnJgfVOlSPF7gfcMUBshYHjBgtTbCw3+WLIZwFSy+Dc6MCreC:Di+ynJgfVOlSPF7fpS2HdabtHLIZFy+B
Checks for missing Authenticode signature.
resource |
---|
2a5f9f0a54afcc2844eec6f6713f14c2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Hold
Init
Install
Logon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ