StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
5dce74c1d71e49b1909b1e129cdf87dd_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5dce74c1d71e49b1909b1e129cdf87dd_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5dce74c1d71e49b1909b1e129cdf87dd_JaffaCakes118
Size
54KB
MD5
5dce74c1d71e49b1909b1e129cdf87dd
SHA1
6b5a119f2434f0459ff60e0a73310f988a118f9d
SHA256
dd24e92126ee4e698a4eae64b714f7483e34ca0a9bcad10389b813628a4b5593
SHA512
fefd2a2df51f73eff4944193cd501332031e7b6213f604f0eacf53a9b142808aee3995a34147643d1d5da1f12e296ec44d31345cbe6d173b175e9c780450c879
SSDEEP
384:w5m7HqCmdQTuvy0v94v6ncV0XoOYLU3hdwSHSQrcjXX6qgrCdSK4K1Kw9YdUKmBb:r7HqLQKvyi2PV1LruSugngrC1WE8LS
Checks for missing Authenticode signature.
resource |
---|
5dce74c1d71e49b1909b1e129cdf87dd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE