Configured
DebugIOCTL
DoDMA
GetDriver
ReadMemory
ReadMemoryBuffer
ReadMemoryF
ReadRegister
ReadRegisterBuffer
ReadRegisterF
WriteMemory
WriteMemoryBuffer
WriteMemoryF
WriteRegister
WriteRegisterBuffer
WriteRegisterF
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
65068ffd116a9d9bb966041901d4bf31_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
65068ffd116a9d9bb966041901d4bf31_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
65068ffd116a9d9bb966041901d4bf31_JaffaCakes118
Size
165KB
MD5
65068ffd116a9d9bb966041901d4bf31
SHA1
0eb58da552a9c6311e70647b70f69eed9bd7fc28
SHA256
1e61341e346150f793f3f8ba5ce5dd18889e687bc97bc434708be5af844de755
SHA512
3390c5c1cd049f6e3350201f552e469514a861cdacb0c15d26e70d0b2f1015ab533d79bc9c42cff598fadab70948974754b7daecdb5aef55821df253c2097f67
SSDEEP
3072:txf35Wb9UTlXvwyhdQXtvYTvlAkIPK4HHyWd1LI0d1LIB9d1LI9d1L:XhWpUTlfwnXtYTvlvIC4nZ1Lh1L61LIh
Checks for missing Authenticode signature.
resource |
---|
65068ffd116a9d9bb966041901d4bf31_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Configured
DebugIOCTL
DoDMA
GetDriver
ReadMemory
ReadMemoryBuffer
ReadMemoryF
ReadRegister
ReadRegisterBuffer
ReadRegisterF
WriteMemory
WriteMemoryBuffer
WriteMemoryF
WriteRegister
WriteRegisterBuffer
WriteRegisterF
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE