StartHook
pt_ksHook
pt_tzHook
Static task
static1
Behavioral task
behavioral1
Sample
63fee2c4746acb0e7bff126ac3f76c3d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
63fee2c4746acb0e7bff126ac3f76c3d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
63fee2c4746acb0e7bff126ac3f76c3d_JaffaCakes118
Size
47KB
MD5
63fee2c4746acb0e7bff126ac3f76c3d
SHA1
128149a324e529992515be08d310238b3c0a0a3c
SHA256
745b4008bed692e0edb7fc21bc301d4e56509d61e13678aee31a5203a54191bf
SHA512
23b1c4a2f748c733f74d6c20f3e540ee206aff1ed3d0e6ae301906cc6e91d10b3da47cadf74a391f53aecbb51029c2fa623352239bb5a86efb2f26c0f22551a0
SSDEEP
768:PZi3CojIBh/TdJ06tQ/0bo/LUwrVjJF2LjfrCr6LN+prck6jydy:PZi3Cn30J/0bo/GfrCr6L4rS
Checks for missing Authenticode signature.
resource |
---|
63fee2c4746acb0e7bff126ac3f76c3d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
pt_ksHook
pt_tzHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ