estableceproc_dll
principal
Static task
static1
Behavioral task
behavioral1
Sample
4e11ef572fd0307a28f275c15cb969b4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4e11ef572fd0307a28f275c15cb969b4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4e11ef572fd0307a28f275c15cb969b4_JaffaCakes118
Size
64KB
MD5
4e11ef572fd0307a28f275c15cb969b4
SHA1
c6022231e2e84183da45be214a39b3d9475d3a88
SHA256
380b5db19c3a0ed763648ef297af9a5c19f95b8e79f94d234584a0ef2aaf4310
SHA512
83f032f80ce44882c3c8d50f852350bc83da30c82c01ad24b5465c0cf5fa297a45661275a1454cdaa34b52fcc0f6960662eba67e5fccd4a43819b7c7d31e39c0
SSDEEP
768:EtldyfBrhCuZEm/yY5s+D3JMo1J+oZ3YI3+TVvdJv5hPVcjDW8ZyTTR/jqb4:EtyfBrh1tr+XnxPVcjC8O/
Checks for missing Authenticode signature.
resource |
---|
4e11ef572fd0307a28f275c15cb969b4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
estableceproc_dll
principal
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ