DLLInjectedAdd
DLLRemove
Static task
static1
Behavioral task
behavioral1
Sample
6989d222f8bc0bb5d7918d6e31eb79aa_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6989d222f8bc0bb5d7918d6e31eb79aa_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6989d222f8bc0bb5d7918d6e31eb79aa_JaffaCakes118
Size
36KB
MD5
6989d222f8bc0bb5d7918d6e31eb79aa
SHA1
d12ca68c03f719943a082bb3d8c91d1eaafdca44
SHA256
89844b6746a89b8c5d9cc9b53107c41bfc799e75752969aa81004e8bf6dde259
SHA512
5823990e3a2c57607a2a43e6405381aeee9dda97dd50c904acf0374ebc20c86b853c9eb70c7c952764627971e75b7211ad3ee65f3d10cc53e0387ca7332ab123
SSDEEP
768:j+aoi6qZOpQB5ZpOc06HCMN9GT6RJ5BHUEy2YEZZEoK:j+av6qZ4QxpP0AtNfRJ5BHxYR
Checks for missing Authenticode signature.
resource |
---|
6989d222f8bc0bb5d7918d6e31eb79aa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DLLInjectedAdd
DLLRemove
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ