My_ini
StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
442d3a6abb9a3d9da136219600da0a91_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
442d3a6abb9a3d9da136219600da0a91_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
442d3a6abb9a3d9da136219600da0a91_JaffaCakes118
Size
397KB
MD5
442d3a6abb9a3d9da136219600da0a91
SHA1
9857048c53cb37652bf0c6944b3a5471464cf5cb
SHA256
098a50d64c7d59e8ec77ca06afff6f2029c886d1c6b9a0b3d66fa4892f7f15d8
SHA512
43cd8c3bb30add596f47dd78ca607f2d578b0bbb1a7d4db0f557828ab9925b073eb7db7804806f0f4de4c96e6fc7d04072258e3fccd35cc2a12c308166b7b5ca
SSDEEP
6144:U9+jyg9VQXcVoFj6Wd1b+7DbWVeUPCW3e0dZfFgCZTdsmnElezyi8JAIn8ovVp+2:hzVQWodMXWht1dTdxGmnO/i81n8U
Checks for missing Authenticode signature.
resource |
---|
442d3a6abb9a3d9da136219600da0a91_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
My_ini
StartHook
StopHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE