HookOff
HookOn
Static task
static1
Behavioral task
behavioral1
Sample
3260c4cdd0959122738cfd16d28303b8_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3260c4cdd0959122738cfd16d28303b8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3260c4cdd0959122738cfd16d28303b8_JaffaCakes118
Size
126KB
MD5
3260c4cdd0959122738cfd16d28303b8
SHA1
d6c25f8b44926689e556fedcfdae416d0bc4f191
SHA256
ede6710840ea70849a98b8c192f67f19558a0254f5701e7c24508d990e58ed2e
SHA512
239c4d8d27339aa1ab24e0330b9b4a60e2eeb9582e097334cb33994dc8c11325d2214b4189067895126241862f28cfa80013771a84254fefb3218b8c414d601e
SSDEEP
3072:q6T+1r43p/oyukeTcxG1rAYjkPD5RcdqqGPkUjtu/CllO9:waApTcxsUedqkUjt3
Checks for missing Authenticode signature.
resource |
---|
3260c4cdd0959122738cfd16d28303b8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
HookOff
HookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ