StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
5d850f3921e2da79632ad41171590b3b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5d850f3921e2da79632ad41171590b3b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5d850f3921e2da79632ad41171590b3b_JaffaCakes118
Size
30KB
MD5
5d850f3921e2da79632ad41171590b3b
SHA1
cbb842e6f229108271b00345bbf7b7b009fd2a36
SHA256
314b5cd06049e6f7e68af94ee64841457a61dc5eafcc55b99c05084f7f1398d5
SHA512
82a3a6a34758f9365432197c2e3a740e76f2e69f1df77b816fc82611538499a0157572281b166ba6aa1da2c084396be9762cd7524c400bc78c719c048b3315d3
SSDEEP
384:qZ6u2RbwBVk4ZkEAsOYXzVE8vjdEWNnlnATijXD6k0slRuziI1ge:qZrKbwBVk4fO2jK6lYiWk0slgziI1
Checks for missing Authenticode signature.
resource |
---|
5d850f3921e2da79632ad41171590b3b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
StartHook
StopHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE