StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
6120e3a695270592dae6c37e135b8a5b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6120e3a695270592dae6c37e135b8a5b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6120e3a695270592dae6c37e135b8a5b_JaffaCakes118
Size
36KB
MD5
6120e3a695270592dae6c37e135b8a5b
SHA1
d7e12990c81835e53cae7b81ca10145af0f2383a
SHA256
6bb5e198193d387ca134dfdcb53b9e6c24c20514b2ed00c214d48dbbcad5909b
SHA512
e3cca2230d73d883f0b3186be8228bdc43edaf79b9edf821c4e2ab89f7ad674e3009dfad651b6b0aa2ef8a22b1fe65ee8be1fd8821735adbe06c5406ae6d43d5
SSDEEP
768:qB4ByKq2Q6NBn08gBIPgAKVvUXnoVd1rxlnrLzqpqrfU6I:qBdKq2Qc2PUYTRnTNs6I
Checks for missing Authenticode signature.
resource |
---|
6120e3a695270592dae6c37e135b8a5b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ