StartHook2
StopHook2
Static task
static1
Behavioral task
behavioral1
Sample
5b0ac28bbb412b40ae7f6d7e249fff61_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5b0ac28bbb412b40ae7f6d7e249fff61_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5b0ac28bbb412b40ae7f6d7e249fff61_JaffaCakes118
Size
68KB
MD5
5b0ac28bbb412b40ae7f6d7e249fff61
SHA1
fd5dce7a4fe18f6b616b57105a978ebd5b2c3d50
SHA256
8a81081077bd5b912ecf1c5cdb5dc885b1f0b255f5717debaada0b37e8c0cbfd
SHA512
8b3077d52cea56fded12acd5f9fe34e3aef73f8f5fe7fa8b4cabc877f08f5019a19367f89a2759e7fad75c01ed6bf0419cf22269f77f31eaa8f3c0501513712f
SSDEEP
1536:fhyjwsYzXf9pQ0vBFn4TOvmF6Yk+q4I/kHDsjqm9N:Jyjwn+0vBcDFF1tHox/
Checks for missing Authenticode signature.
resource |
---|
5b0ac28bbb412b40ae7f6d7e249fff61_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook2
StopHook2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ