StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
679a24221f5a5f7ab6c41b5249ff6bd4_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
679a24221f5a5f7ab6c41b5249ff6bd4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
679a24221f5a5f7ab6c41b5249ff6bd4_JaffaCakes118
Size
18KB
MD5
679a24221f5a5f7ab6c41b5249ff6bd4
SHA1
b1fe7d42303d666e3cd6048b65b89e9257f026c5
SHA256
156f9c1c085b901716e3fb3a5f2ae22aaa2d47df132602c65a027096a45821d9
SHA512
2f00ab7ad98a021152fdef1508e181b558821fbc87e064217ab1ed0f93801bb5d82ce92c9e60bd777627ea8bfd7ff427db96d1c5f5c2bedd9f7ee53b0d575d74
SSDEEP
384:LRdCyfMqlW2mQmbZNaDo2hVE8vjdEWNnlnATijX:jCyUqlvmQuZg7jK6lYi
Checks for missing Authenticode signature.
resource |
---|
679a24221f5a5f7ab6c41b5249ff6bd4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ