readfile
ter1
ter2
ter3
ter4
Static task
static1
Behavioral task
behavioral1
Sample
4492b827e26624e928b6c1bbfe3fd497_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4492b827e26624e928b6c1bbfe3fd497_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4492b827e26624e928b6c1bbfe3fd497_JaffaCakes118
Size
399KB
MD5
4492b827e26624e928b6c1bbfe3fd497
SHA1
9cd444a3099fedbc4c5cae8f8ceb1ca8ec011fae
SHA256
2d7106c21c4b6bb4ab4da22b3515652f8f83b80b292cb600e7ea9910542609e3
SHA512
e8911d20935829787f898a455b7830a2e09dd9dd4536a203b1b2191341fda8867b4e8dc25424147dbc9e953d5ae228b67636310a02833d59a11f76242f0d4d2c
SSDEEP
6144:qsg1HEpTQQB4hVsSRds9Vwutqq5HQ5zOz2W6rgRtYTGaOH9K7yAmxjVs772l:MHEpTn4hVeGoFIQtod7FmVVB
Checks for missing Authenticode signature.
resource |
---|
4492b827e26624e928b6c1bbfe3fd497_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
readfile
ter1
ter2
ter3
ter4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ