SetHook
Start
Static task
static1
Behavioral task
behavioral1
Sample
76456d3cf70b3ca64bbf2bc7fc3b1d60_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
76456d3cf70b3ca64bbf2bc7fc3b1d60_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
76456d3cf70b3ca64bbf2bc7fc3b1d60_JaffaCakes118
Size
4.0MB
MD5
76456d3cf70b3ca64bbf2bc7fc3b1d60
SHA1
190efd3ed1c6ce2b1f8260074cdde80c26076a45
SHA256
b70ee9c5bac4a6804d6927d7a253b958d9b4498b5eaf9d48e97f92c79e7e28e9
SHA512
413f24771bc4e5726b1faca1cc87fbf9f3f3fc47906f9c7423f31b17371d98e8031985a75ecca3b2fe509e4d49a1c5c48332588b863fefac9629c3efeebead53
SSDEEP
49152:LosqKDl57foW8kqR8tcYp78EtRNpn5KAzb99NI5oAu/ROVqW8xlJTEdK:LdJl57foW8ko8lp7vjp5P2duAP8Ew
Checks for missing Authenticode signature.
resource |
---|
76456d3cf70b3ca64bbf2bc7fc3b1d60_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetHook
Start
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE