ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
2ba530b21bc72eea349b4cfd81f4b925_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2ba530b21bc72eea349b4cfd81f4b925_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
2ba530b21bc72eea349b4cfd81f4b925_JaffaCakes118
Size
5.3MB
MD5
2ba530b21bc72eea349b4cfd81f4b925
SHA1
622e753c8b01dbb5be0e0ad132058a7700a064ef
SHA256
1a1792152bca63edca4a67e62305a7a0311abea5076cb7d47621a9d3ca024f4f
SHA512
01f6f799a27b51bb7f07317cce96dcbc92af1e0fca2f2677e5d3dcaf9d95d7bff8550ae4b4f1ad8458b1940b52cc90add7cd3b2306d5c8d86776dac894f485cb
SSDEEP
49152:bHeTlP2+7MhF0UaK1Nl5YN4gZCCQCM0Cla1PrIHGKPe8FLfM9tvnq1ucKMr00b7v:bmN7u0o7YZQCM0nkRDLXZ5bdeiOxj
Checks for missing Authenticode signature.
resource |
---|
2ba530b21bc72eea349b4cfd81f4b925_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE