StartHook
StopHook
mksHook
mtzHook
Static task
static1
Behavioral task
behavioral1
Sample
3366ade535ee8af80e4d5db57148d345_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3366ade535ee8af80e4d5db57148d345_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3366ade535ee8af80e4d5db57148d345_JaffaCakes118
Size
29KB
MD5
3366ade535ee8af80e4d5db57148d345
SHA1
37f5e8f03aee8c29a5a6f4e78c276f4157221068
SHA256
62cd009d1384bcc12d4c939d50ffc09ea9adf9f1638786775c1f5e48dbf23ca6
SHA512
6171acaa0e307d52d6830652a3411b8cbe0cef6f02a161bbd34a9d3bc551a87759571a9477cc753f343c190f4d091c5222ea52dd4afc11fcf8e366973433798b
SSDEEP
768:voENDucSQkBvH5mCdCe/8MdwwBDMTyKDc:QSqPPECdjR/lhP
Checks for missing Authenticode signature.
resource |
---|
3366ade535ee8af80e4d5db57148d345_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
mksHook
mtzHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ