WinOffEX
WinStartEX
Static task
static1
Behavioral task
behavioral1
Sample
2c80c0232136604b25ea82dd28491e92_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c80c0232136604b25ea82dd28491e92_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2c80c0232136604b25ea82dd28491e92_JaffaCakes118
Size
50KB
MD5
2c80c0232136604b25ea82dd28491e92
SHA1
3e322c0395357e9e750b3a0f931ec1dc4527fa44
SHA256
1698fc13b8d6eab5433cc96611e2730f17678f09934d10bf60922c3119b1af9a
SHA512
edecc50e14b5fc15569f15cd2b156eeef4adbcdf0d95ddff69468b48f2bd4af8801f6ecbd6b484c14231768fd89e8e860db6638d54fc0adfcba1dc85ee8bc7c2
SSDEEP
768:+RiEqcQYI/uVvuZ8NMoSNtNnasDy3wDyDLgbZ6P4ufKK7NVBm7Fq/kVcRhMlZKQ:DEqcQb/ChNNSJn9DygAPDfKKg7F9VcD
Checks for missing Authenticode signature.
resource |
---|
2c80c0232136604b25ea82dd28491e92_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
WinOffEX
WinStartEX
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ