_00000500
_00000502
_00000555
_00000556
_00001000
_00001002
_00001010
_00002000
_00002100
_00004000
_00008000
_00016000
Static task
static1
Behavioral task
behavioral1
Sample
3a134132f4aa31074da535fa7c560168_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3a134132f4aa31074da535fa7c560168_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3a134132f4aa31074da535fa7c560168_JaffaCakes118
Size
318KB
MD5
3a134132f4aa31074da535fa7c560168
SHA1
c59cc5fc300cf7c48c4f90392a4533a5f81da940
SHA256
5583f6c3b092e7d7ef75f09482082898af405f2bf8bb1e018d3206a8fc7e6dd7
SHA512
d2e2d028d0e68d28ba225a1c6f99400692fcd34b6f65a9ebe404e345cbd53635db2bd8ff5d94315519bbd23d2d5167b3a9edbb46f38a37455ada78f014314607
SSDEEP
6144:TdsdqAq46Y3xmPIA3c7mDRUyyVx59G/b4KDRdqxP+9LTyMDvBOa5LFgp:TdsV64xOI6bUT9GDlgxIy2vYaJFm
Checks for missing Authenticode signature.
resource |
---|
3a134132f4aa31074da535fa7c560168_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
_stat
ShellExecuteA
FindWindowA
_00000500
_00000502
_00000555
_00000556
_00001000
_00001002
_00001010
_00002000
_00002100
_00004000
_00008000
_00016000
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE