Hold
Init
Install
Logon
Static task
static1
Behavioral task
behavioral1
Sample
38b4c1d513b3740ccab54c29522f1e49_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
38b4c1d513b3740ccab54c29522f1e49_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
38b4c1d513b3740ccab54c29522f1e49_JaffaCakes118
Size
87KB
MD5
38b4c1d513b3740ccab54c29522f1e49
SHA1
5ddfbc04d99e8cdc3b7d6d6aa3a3d0872e5be0bb
SHA256
f9b8a370386911c568291dc1b1be170117bc3e15dcfc531b9231de0b85946a91
SHA512
2ac337a72a8f6d83b43e87dd43f7527802e86abfe8665b17f756f931d2a34505355d0b266c0f5c389f65184211467f0e6aa586cf98765fab34a1942f56055a47
SSDEEP
1536:JnPq5Qc3P4Sn3RefLx3zW43KzALKixFbrn3IB+XY7jMYC:J6p3P4Sn3wfLxjW4ZLKkbTu+XDR
Checks for missing Authenticode signature.
resource |
---|
38b4c1d513b3740ccab54c29522f1e49_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Hold
Init
Install
Logon
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ