ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Behavioral task
behavioral1
Sample
606e9bc26b0f7c4500b020e451aedd56_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
606e9bc26b0f7c4500b020e451aedd56_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
606e9bc26b0f7c4500b020e451aedd56_JaffaCakes118
Size
8.5MB
MD5
606e9bc26b0f7c4500b020e451aedd56
SHA1
9ddf6b6e464cbf39a9b6ca9ffb247238d1517e9f
SHA256
f80ba4767d52308cf6702c87daab4f50dc58dd022518368ddf0cb5c552820559
SHA512
acfb2b0fd8bca800e114faadc088b79cd598120eb23488c97da7a8373116151900afb623a55f0837ce9e1e927f8772583a853eb31aa3c0039e3bd305b6c2ecf6
SSDEEP
98304:a4Bq1Xftbs+DbpkQjxYBQdiQIY76dQH6CNC/Nu6pL/BRxXRZAXa3L:a4BaXftbrmlQewN07FRZk+L
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
606e9bc26b0f7c4500b020e451aedd56_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE