StartHook
StopHook
pt_ksHook
pt_tzHook
Static task
static1
Behavioral task
behavioral1
Sample
39d0b0cad0f288ae9bd4840db7d0d9ee_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
39d0b0cad0f288ae9bd4840db7d0d9ee_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
39d0b0cad0f288ae9bd4840db7d0d9ee_JaffaCakes118
Size
29KB
MD5
39d0b0cad0f288ae9bd4840db7d0d9ee
SHA1
32f6ed707cd0a41ca4aea70aff15612ef935de7a
SHA256
a98f9d5f496540cc12c780537e790558d688e9c478ea2049d69c9c02161c2d39
SHA512
e8d81d85a28b379b79ceb6eb5d1ffe16104d73c78be7c96caa0c90747e02a086400602ebb7bf843f19b4bdc26e9c7cff8a54d1b63a3555a954344acdc249061f
SSDEEP
384:0yOQrGec4/4ZuXJeUfcWCOhSY2yj11vlSKFlCfyjAWVdGDra65IHz8N/LsJy3YRe:0An1Rjp/XCfhjw8NF86syx
Checks for missing Authenticode signature.
resource |
---|
39d0b0cad0f288ae9bd4840db7d0d9ee_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
pt_ksHook
pt_tzHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ