EndHook
StartHook
Static task
static1
Behavioral task
behavioral1
Sample
39347cd412125ed901ae0fdd11a40d78_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
39347cd412125ed901ae0fdd11a40d78_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
39347cd412125ed901ae0fdd11a40d78_JaffaCakes118
Size
86KB
MD5
39347cd412125ed901ae0fdd11a40d78
SHA1
94943e5b825f0eba9dd12c54f841cac2d4e12075
SHA256
62ca34abfca4e7ac9cff2f9d64a6a58f54bc72519efcb0f250dba49136f25c36
SHA512
2b45dc3711bf7672d439cd6fc822aa8aa4e45c51161822b6d80c514b3f33b607ccf82fcbe889715e34dae085abc4663957f4a25d1fc2c4f1f8da534e2145c177
SSDEEP
1536:jjqjoQ3Qa9bYR0Zz2uaw91iexlsQ610thS7AYqPa8o0jT1NpZjG2x9:eoROMAzRaq1iexls510PS7AYqS8ok1NL
Checks for missing Authenticode signature.
resource |
---|
39347cd412125ed901ae0fdd11a40d78_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
EndHook
StartHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ