HookStart
HookStop
sBlue
tBlue
Static task
static1
Behavioral task
behavioral1
Sample
400bc48766dd6c8e5cedb126144d429f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
400bc48766dd6c8e5cedb126144d429f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
400bc48766dd6c8e5cedb126144d429f_JaffaCakes118
Size
18KB
MD5
400bc48766dd6c8e5cedb126144d429f
SHA1
9f91c55c11f88e1b8468e8a1b20eb62800c65699
SHA256
9ea8bcd10e76a7b327bff44f4c68f14505997e5ab4ff3a0afbfbefd1e7b20fa9
SHA512
eb73c5e65ac25f2ec65c4df65b7fc8fd2740c7d04369e6eaae1838ae32ce304519f9d9ed7e2c914842dc0612e09d898fcefa9dd8b849bf20a3b57f91a5a04835
SSDEEP
384:f2gFw7nQjT1T7ckf0fSBJEPib8/AZX1ww:y7sT1TVQSAPig/1
Checks for missing Authenticode signature.
resource |
---|
400bc48766dd6c8e5cedb126144d429f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
HookStart
HookStop
sBlue
tBlue
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ