ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
3ad1427ec4ebbb868fcb92052f97b0d5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ad1427ec4ebbb868fcb92052f97b0d5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
3ad1427ec4ebbb868fcb92052f97b0d5_JaffaCakes118
Size
5.3MB
MD5
3ad1427ec4ebbb868fcb92052f97b0d5
SHA1
32adb29771d649c605a330bde993a54ce6dfcea4
SHA256
2c6daf8b6d37e91d53fa1715497ebdc95a15c8bbee7ddee7ba8b5196d0c5a91f
SHA512
f0de0ab2cde8d0069a15be6f3585aacdb96b41985a783ceda85cd456d3d00d16ce30e49c43b54d34e4e5a494000e3facc457f2b268a22f96ed72f104cc7af9d0
SSDEEP
49152:bHeTlP2+QMJF0UaK1Nl5YN4gZCCQCM0Cla1PrIHsKPe8FLfM9tvnq1ucKMr0+b7d:bmNQu0o7YZQCM0nkHDLXZbbd8iOxj
Checks for missing Authenticode signature.
resource |
---|
3ad1427ec4ebbb868fcb92052f97b0d5_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE