ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
31168a903117e7f0b1850e4da599e923_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
31168a903117e7f0b1850e4da599e923_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
31168a903117e7f0b1850e4da599e923_JaffaCakes118
Size
5.3MB
MD5
31168a903117e7f0b1850e4da599e923
SHA1
bab6a8d83376909f962bcbeff01e82e2457d4835
SHA256
0a6bcd803aca334e946cada30dec37c834969adb26b8f06d886cd96ee58b79e7
SHA512
0cb296e51a64276b5acb467616d76f3fb6374dea13c0bb6295255475c256c797513d5907934f9b604432f83cf8f22f0f960d0cae9253467ac5bcc1c06c1dc59c
SSDEEP
49152:bHeTlP2+MMzF0UaK1Nl5YN4gZCCQCM0Cla1PrIHsKPe8FLfM9tvnq1ucKMr0+b7n:bmNMA0o7YZQCM0nkHDLXZbbdyiOxj
Checks for missing Authenticode signature.
resource |
---|
31168a903117e7f0b1850e4da599e923_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE