ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
39977514fc78efaaad60f1484a6e216a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
39977514fc78efaaad60f1484a6e216a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
39977514fc78efaaad60f1484a6e216a_JaffaCakes118
Size
4.5MB
MD5
39977514fc78efaaad60f1484a6e216a
SHA1
71da772ab22be660194d7db9d91a1f51d8332e5c
SHA256
c254c0b2f63d215937954b66264669ef41783a0782cc4b5137d878e49a4e4a6c
SHA512
690181fd2b57a04d1666fe080b145581b9e9e1a2703aefa2a0d06edbd663fd49ca0db86d901c7940794961c9c42cef074a98572ae49f698d75f6b085a57b7780
SSDEEP
49152:7HeTlP2+rM2F0UaK1Nl5YN4gZCCQCM0Cla1PrIHGKPe8FLfM9tvnq1ucKMre0b7A:7mNr70o7YZQCM0nkRDLXZPbd6
Checks for missing Authenticode signature.
resource |
---|
39977514fc78efaaad60f1484a6e216a_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE