ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Behavioral task
behavioral1
Sample
2cdd91d1d8fc24d54c38da3a5cc2cbdb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2cdd91d1d8fc24d54c38da3a5cc2cbdb_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
2cdd91d1d8fc24d54c38da3a5cc2cbdb_JaffaCakes118
Size
8.5MB
MD5
2cdd91d1d8fc24d54c38da3a5cc2cbdb
SHA1
361cf4e3b2572f2598d6e126af39787f0e5e4e0e
SHA256
150618bbda4a60787b1b5b7bd5addf66bb7eb223c7b4614df51e0e6650ce1055
SHA512
cc1c942930077fd41112753d9e933174cdf03ba97ff138184079df8075dee268369a64ef9e9339f62e94e8b544809aa8594c6fb8b9e342e8754e9ce342e874e6
SSDEEP
98304:44B3aaftbsmDbpkAjxYBWBhQIY7hdOH6CNC/Mu6kL/LzWXRZAXa3L:44BKaftb/mVWoaNYzCRZk+L
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
2cdd91d1d8fc24d54c38da3a5cc2cbdb_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE