JGS7DecodeBlock
JGS7DecodeBlockQuery
JGS7DecodeCreate
JGS7DecodeDestroy
Static task
static1
Behavioral task
behavioral1
Sample
6449c14c353931ebe7d356b7afc2582c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6449c14c353931ebe7d356b7afc2582c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6449c14c353931ebe7d356b7afc2582c_JaffaCakes118
Size
140KB
MD5
6449c14c353931ebe7d356b7afc2582c
SHA1
ae665fbe8e63318f25227319108ddcac3402c1b7
SHA256
4fd0668f8c1d4645b928e6ec5a8c142bf98b05e9487abaa0f7ec9231d2222efa
SHA512
d6103fc4bf819f0e090a2d99e93389bb6d548293749f315f5996e9ddc006da91132492729bc8b507b594fd0f6de88b6ced1939f3712895ca3f509a54eade7a61
SSDEEP
3072:YGd5SHHEj6na+5voJgo5GfqKnmWvQusDDbB6AeE4G:nd5Abna+68i4Qusb0XE4G
Checks for missing Authenticode signature.
resource |
---|
6449c14c353931ebe7d356b7afc2582c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
free
malloc
_initterm
DisableThreadLibraryCalls
JGS7DecodeBlock
JGS7DecodeBlockQuery
JGS7DecodeCreate
JGS7DecodeDestroy
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE