StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
4b2243ab334c3d42e4c3f8f343192d11_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4b2243ab334c3d42e4c3f8f343192d11_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4b2243ab334c3d42e4c3f8f343192d11_JaffaCakes118
Size
14KB
MD5
4b2243ab334c3d42e4c3f8f343192d11
SHA1
aa151f7f31e5707710414433aac17f672a9c40d4
SHA256
3052436c11fa604d4ae45fe67900ac0125520f9775e067ae0c067e9cb4b23d09
SHA512
58dd704b9f6015ef121d7d69747c648e92a70a0af26266ce78403362f4b2a44528668757f44a94f4ce8745002115ed768f8fdf509cc65d0f92a56f24bf6a842a
SSDEEP
192:oDOE+8cW3l0vdV+ePs32FYKXKq9t0h76x9CUm0:wOEF2vDNPs3xK6zh7B
Checks for missing Authenticode signature.
resource |
---|
4b2243ab334c3d42e4c3f8f343192d11_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StartHook
StopHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE