ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
31e7604fb0bfc89571c1bf78d1e657e6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
31e7604fb0bfc89571c1bf78d1e657e6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
31e7604fb0bfc89571c1bf78d1e657e6_JaffaCakes118
Size
4.1MB
MD5
31e7604fb0bfc89571c1bf78d1e657e6
SHA1
96ddaab90f3da3fb9daeacc61d49465f2fcfc2fd
SHA256
425d23b86f0ba678a8c2dec0f4baf18ab144d6e96a49013fb785654c8ffc347a
SHA512
ff56cff6b01c395e34d5ce06e343306bf23ca41b5888d4634c505690a38c3ee094ac4e8304cd5b800aca1fa63451f65553a63f421992266b1f600a2271305aaf
SSDEEP
98304:ZPaAzn7c03hoaoKPO0pmTi1t3YYio+8WUIhJBVOeE19:Baw7aaDPoG1fOTVOeEP
Checks for missing Authenticode signature.
resource |
---|
31e7604fb0bfc89571c1bf78d1e657e6_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetProcessHeap
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE