DLLInjectedAdd
DLLRemove
Static task
static1
Behavioral task
behavioral1
Sample
3506aa4800be05a74366e6e1887d0c0a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3506aa4800be05a74366e6e1887d0c0a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3506aa4800be05a74366e6e1887d0c0a_JaffaCakes118
Size
33KB
MD5
3506aa4800be05a74366e6e1887d0c0a
SHA1
ebb6c9f388dde8e4d9a9e6dc4100a7ca39aac506
SHA256
b044c5e814a9695d74ed4b92c98f36cc77a70d325ea85ebde3c8123109364f4d
SHA512
d5dd3ac517d65f14b162e693de1d6fcb9170d3e3575fc38738c931f4dbd0325c7d2d243e53668505fde9175eb2fb6ce71bb97b1d7e1d78d9cb468714ad44d508
SSDEEP
768:n+aoi6qZOpQB5ZpOc06HCMN9GT6RJ5BHUEy2YEZZEo0:n+av6qZ4QxpP0AtNfRJ5BHxYj
Checks for missing Authenticode signature.
resource |
---|
3506aa4800be05a74366e6e1887d0c0a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DLLInjectedAdd
DLLRemove
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ