ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
405519e3720b83de6b2d69cddaf119b4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
405519e3720b83de6b2d69cddaf119b4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
405519e3720b83de6b2d69cddaf119b4_JaffaCakes118
Size
5.3MB
MD5
405519e3720b83de6b2d69cddaf119b4
SHA1
07699370c4b945d5d9dd0683550905b9adfdad97
SHA256
3a08186148f09d6c9b41985cd9972a8b21a3bf9091967e1bd14f0b9ed83cd974
SHA512
e65421fa4d723cc58bfefe3f7465d1f01ed58e1a0183ec1a3bd6091de023612fdbebbb3cbedd7336c38f1a8386b722614140f4e0e3db4c56168b31211ea95d00
SSDEEP
49152:bHeTlP2+MMzF0UaK1Nl5YN4gZCCQCM0Cla1PrIHsKPe8FLfM9tvnq1ucKMr0+b7M:bmNMA0o7YZQCM0nkHDLXZbbd1iOxj
Checks for missing Authenticode signature.
resource |
---|
405519e3720b83de6b2d69cddaf119b4_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE