starthook
stophook
Static task
static1
Behavioral task
behavioral1
Sample
5b4e9e72390fb3d4b775e8f132071201_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5b4e9e72390fb3d4b775e8f132071201_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
5b4e9e72390fb3d4b775e8f132071201_JaffaCakes118
Size
49KB
MD5
5b4e9e72390fb3d4b775e8f132071201
SHA1
f6391ae3d0371fc4a54a9017da16befc1d7feea4
SHA256
118820be24b0909dd286599cce786e378d256efdf7f4023cb9aca25e8e249b6e
SHA512
60a892ac6d4d7ef2607b8a122df9043db88165b83d443fc5792e3560f2aedce6f656a209dd239943ad6399fec512bae90d150227253639e19caeea5d7a93b141
SSDEEP
768:G3nipqbQrLvwChZHuPJp4pvoGi9jW4LY3bw5ySOp62pOtZw6uGrc4jtI3sJI7HZh:G3ipqbQvCopv6psaLsLPGdI7Z3x
Checks for missing Authenticode signature.
resource |
---|
5b4e9e72390fb3d4b775e8f132071201_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
starthook
stophook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ