ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
677321b09e260376bd768bb5b7d6b85e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
677321b09e260376bd768bb5b7d6b85e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
677321b09e260376bd768bb5b7d6b85e_JaffaCakes118
Size
5.3MB
MD5
677321b09e260376bd768bb5b7d6b85e
SHA1
1e46dcbd6bdd49bac0eea7f4a511d177507ed709
SHA256
ca62b6c27dc81c86ac1dc3aec74615a50133bf6da2feff8ee8d900be49ac5de3
SHA512
6cd24e147757bc1108975e63fe1de4f3e5326b8882e8d84dbec437ef377fcd2b8be2b7eb80587fef51c71823b968696197d8f4ac5d599df7dbd9353e9ad8e36c
SSDEEP
49152:bHeTlP2+MMzF0UaK1Nl5YN4gZCCQCM0Cla1PrIHsKPe8FLfM9tvnq1ucKMr0+b7X:bmNMA0o7YZQCM0nkHDLXZbbdWiOxj
Checks for missing Authenticode signature.
resource |
---|
677321b09e260376bd768bb5b7d6b85e_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE