AutoDel
Port
dllName
szIP
vPasswd
Static task
static1
Behavioral task
behavioral1
Sample
2bc76f92230ebd7c202bab2320d6a907_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2bc76f92230ebd7c202bab2320d6a907_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
2bc76f92230ebd7c202bab2320d6a907_JaffaCakes118
Size
368KB
MD5
2bc76f92230ebd7c202bab2320d6a907
SHA1
c1c3edbed9945ebc132f498334253d9fbe0045ee
SHA256
c154cf296a69e2efa3241a66f05253cae3c9bbd082899c69e340cf264d351ab0
SHA512
5dba0ed19e95acd9cddffb2fed81a9371a5c34c7df399f0707b0c31ec1daa5688ee0ab140c6516920f573275c121a23bcbe50d9af2852c2824a306810976df3d
SSDEEP
6144:IdilxFMqMgnwIYNH1XY8UehZv6R++ZBUAvefHVOQexjCOvCvtnh/UeoYjl0O7yIN:U+FyywIulY8Jj4HUAWPVu5C/t2alffgO
Checks for missing Authenticode signature.
resource |
---|
2bc76f92230ebd7c202bab2320d6a907_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
LoadLibraryA
GetModuleHandleA
AutoDel
Port
dllName
szIP
vPasswd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE