DoPS
_DoDllPS@16
bPS
Static task
static1
Behavioral task
behavioral1
Sample
4435cbd62c6aa1b936235280e367c144_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4435cbd62c6aa1b936235280e367c144_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4435cbd62c6aa1b936235280e367c144_JaffaCakes118
Size
56KB
MD5
4435cbd62c6aa1b936235280e367c144
SHA1
55767bf1887990eb40e85d33eb27b434df7e57de
SHA256
aef19dd8e852fc700754ec8251226307a228320416fe1e1929856e6ec7f34692
SHA512
7694130b7355f5da27e3e8b937ce57d37b6322a131b0739d253d3b8dd851083334fbb274fb9e0a95b01d22d3024367577ba6adf1d69e93914868cccee4adff0c
SSDEEP
768:pbwUkOfNPE5XrmnfZHrHFCn91MoBxOQj6HkK5pVXIny+bq:DRlkrmfdrHFCn/MoBQo8Rv+y+b
Checks for missing Authenticode signature.
resource |
---|
4435cbd62c6aa1b936235280e367c144_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DoPS
_DoDllPS@16
bPS
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ