WSPConnect
WSPStartDown
WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
4d8253706ed20c45635a71d13ed53382_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4d8253706ed20c45635a71d13ed53382_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4d8253706ed20c45635a71d13ed53382_JaffaCakes118
Size
29KB
MD5
4d8253706ed20c45635a71d13ed53382
SHA1
5a82fc2e34dd97ebb3ac3716587dab7d21d0fb90
SHA256
eb490c7e8513329433af65ec53a7e42a894e6caa6232cce6601af0613b9263b4
SHA512
24303a891394041d67157624fbd51a9628d93cdd49daa76b27206cd2551f26dd1325b5f9dee333374ef3047f629416ea921c0565fb59f4e76bcc132732bcae31
SSDEEP
768:nKib2+6Q5YHX7xhbYhdAO8hfrbc4SGNQdal31XnBxrcb:KO2jhby38B3Pvmdw3FnBib
Checks for missing Authenticode signature.
resource |
---|
4d8253706ed20c45635a71d13ed53382_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WSPConnect
WSPStartDown
WSPStartup
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE