StartHook
StopHook
eHook
sHook
Static task
static1
Behavioral task
behavioral1
Sample
645ef9a9dce3fa359d6d8bb0c2e7236b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
645ef9a9dce3fa359d6d8bb0c2e7236b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
645ef9a9dce3fa359d6d8bb0c2e7236b_JaffaCakes118
Size
41KB
MD5
645ef9a9dce3fa359d6d8bb0c2e7236b
SHA1
80c3f33e5153c087ca0d32835d7bc7981b652f73
SHA256
132bfca6bbde03205dec85936e7d3ff857faff5c7f8c4d6b9eb8d3e6c33fce8e
SHA512
ed3d518425934dcd611cb8a0377e8da201757e7bc22f3767c2f118516f3a43d5b5bec7ecb581c2f8fca557d3592bac374414637ede254a4c1d371b0e10630d52
SSDEEP
768:pxdUiIJKKRFpsnuVSNkeiMZ9qFN6YbV1q3F0DgIh:pWnJVS/9e6Yh1XEi
Checks for missing Authenticode signature.
resource |
---|
645ef9a9dce3fa359d6d8bb0c2e7236b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
eHook
sHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ