ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
5d87d3919bd098e24131b705a2e8a2ef_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5d87d3919bd098e24131b705a2e8a2ef_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
5d87d3919bd098e24131b705a2e8a2ef_JaffaCakes118
Size
5.3MB
MD5
5d87d3919bd098e24131b705a2e8a2ef
SHA1
5a2e4b07f13c5021c6efa76d4aeedae5d16c4ac0
SHA256
c1ec41b5f4c7482d4ee06c818fd99a9f5ca46f7d5169b25bc837d7f29b1ad5fa
SHA512
2f8a1bd27dde9a4e2cff6f48b5b6288e24793b7efa0669aff7e3ca1c4cb21821f156dcfe675434b70bbd87919f3e86583bec08ddd52a77abc472fee95f15a0a0
SSDEEP
49152:bHeTlP2+/MsQ0UaK1Nl5YN4gZCCQCMECla1qrIHs3Pe8FLfM9tvnq1ucKMr0+b7t:bmN/U0o7YZQCMEi8oDLXZbbd8iOxj
Checks for missing Authenticode signature.
resource |
---|
5d87d3919bd098e24131b705a2e8a2ef_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE