StartHook
StopHook
findwindow1
findwindow2
Static task
static1
Behavioral task
behavioral1
Sample
4a4d8c5b37946826c1f17612130f9281_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4a4d8c5b37946826c1f17612130f9281_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4a4d8c5b37946826c1f17612130f9281_JaffaCakes118
Size
28KB
MD5
4a4d8c5b37946826c1f17612130f9281
SHA1
de9bd53d52ae5b4b089167df148135bc27b32502
SHA256
1d06b8943bc31e890d535cfb146940eeef5d3e0e44b1aed98d3904d7eb8a64dc
SHA512
98e39e77a54cf9a0cdda892af20192ed7aac1b386f31b2f46ef1efdc0fbac17186950d3c45d2b3a4ed055b666acf9759d1b684f1db1dbcf426df835cd7d80dfc
SSDEEP
384:aeKx+NgqvpH6FfGUouARVJF8Oz4KSH1aajoh9YMnfyjAdsWGfhjTF+E+3YcCHYPd:I+qBBArJH49nknfIj6uYrT53
Checks for missing Authenticode signature.
resource |
---|
4a4d8c5b37946826c1f17612130f9281_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
findwindow1
findwindow2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ