ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
3dee493a39bcebd3098649366f34ee45_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3dee493a39bcebd3098649366f34ee45_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
3dee493a39bcebd3098649366f34ee45_JaffaCakes118
Size
5.3MB
MD5
3dee493a39bcebd3098649366f34ee45
SHA1
6c645bb2fbbd4b0eca1ff242ef8116b3a339de5d
SHA256
186bdca33f66e195bdab458575f360e72e6579f09b695327a4b98ebf745f8905
SHA512
a8ccbd88cd5d6040c0891a54e5d2143106e83e1aa85fdc3a5f2271a4a2fd4fb5f49e8dc34b4defb62c6aa5d278b995abcbc08b873f6733585bf67b242b6667ea
SSDEEP
49152:bHeTlP2+MMJF0UaK1Nl5YN4gZCCQCM0Cla1PrIHsKPe8FLfM9tvnq1ucKMr0+b7X:bmNMu0o7YZQCM0nkHDLXZbbduiOxj
Checks for missing Authenticode signature.
resource |
---|
3dee493a39bcebd3098649366f34ee45_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE