My_ini
StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
3a99b06402108ea5e28b3fd1915dbcee_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3a99b06402108ea5e28b3fd1915dbcee_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3a99b06402108ea5e28b3fd1915dbcee_JaffaCakes118
Size
427KB
MD5
3a99b06402108ea5e28b3fd1915dbcee
SHA1
e9b08f21ee10b015d1844b5a8a5bdc617d60051b
SHA256
43a19bafcaf9691e43ac951c54e9da44e4aa6fcd839a1691a38bf7c2b2cde860
SHA512
8ef178d4c0a6b9ba43bd17cc54b62f6771fce695e942b1ac63242d0bc799c943d05c93494cfb4f02ff30839a8b4c0808b8e22482a1ee24ce648ef7881a117d3c
SSDEEP
6144:psXX9LT0XoN1uRI0lWYPzC8tYguP05bCW3e0dZfFgCZTdsmnElfDqPrtjc2B3IoZ:p6tr1a4YPzC8+gu6R1dTdxGmnO8ttI6
Checks for missing Authenticode signature.
resource |
---|
3a99b06402108ea5e28b3fd1915dbcee_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
My_ini
StartHook
StopHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE