Start
WorkA
WorkS
Static task
static1
Behavioral task
behavioral1
Sample
3ee34da0ff5034ca0f928faf43a95d4c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3ee34da0ff5034ca0f928faf43a95d4c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3ee34da0ff5034ca0f928faf43a95d4c_JaffaCakes118
Size
72KB
MD5
3ee34da0ff5034ca0f928faf43a95d4c
SHA1
ea0eee8459676454a25900f94e324ce7a78af974
SHA256
4a638af0d57fed8e8a8046fccb4e86a401946cb1b7c75f2e732d3af63a60a98e
SHA512
c10e06108836b4c05fc992b215857b5fb353ab7abd1eff82e3f0175dd28f81dfac13369b2a4245d89d29d97cfc532623394bdc6fe8c811db15986c07e982ce4d
SSDEEP
1536:H48rdGF5b/P29TX8Xez92wzjFdSbPkVBGozAauq2eQLnMsf3xZZqtUS8PyFr3Ovm:H4oGF5kXnzlFo8/TRuq2WsfglFLOv2BP
Checks for missing Authenticode signature.
resource |
---|
3ee34da0ff5034ca0f928faf43a95d4c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Start
WorkA
WorkS
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ