StartHook
riOff
riOn
Static task
static1
Behavioral task
behavioral1
Sample
462e584ec27a81eeb8a39cd4d6494387_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
462e584ec27a81eeb8a39cd4d6494387_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
462e584ec27a81eeb8a39cd4d6494387_JaffaCakes118
Size
54KB
MD5
462e584ec27a81eeb8a39cd4d6494387
SHA1
cde0bbf78512e19f41a10731a54b6df8c16d389a
SHA256
2b74a6ddc4094b45c25ca444cc3e744763fd43bf657079366b3046719448612c
SHA512
fc2488184fd24a2cad7a943d0a300600325e0ee3303dc4b9f69eced820cc463f9882b4ebae3631bb8c846835edefb87f132f5acbdfd98ac0d3281427dac1a4f4
SSDEEP
768:LMSZqeQJwfljj4p0s9YveMUxmHY9XVdtTVQdTxaT4J72GQ4f4+tA8cfKAm8x:XZqeQkEGveMAXPtTVYTxM0RK8cfKA3x
Checks for missing Authenticode signature.
resource |
---|
462e584ec27a81eeb8a39cd4d6494387_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
riOff
riOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ