StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
72f69bd8cc395609c6768758f8f93fd2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
72f69bd8cc395609c6768758f8f93fd2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
72f69bd8cc395609c6768758f8f93fd2_JaffaCakes118
Size
31KB
MD5
72f69bd8cc395609c6768758f8f93fd2
SHA1
6adde04964f99d6f7e491625bb53794e9ec8c50d
SHA256
ce3469c3b1720b568c00df39d121997050df9afbf33a460a572a09a0ae9a8b5d
SHA512
4eded608438070111f2ba388772f79a47b5d2e0b515f0e6dc9b57f602cdbe5ad9b77f98ab538d773039b3b29376177fbeef7eea05b801414efb39e01f73533a4
SSDEEP
384:bj+ETOe8ym7OIrfkzyLTXbO6YOKSCJRmzPcpCZDchjAWf06WoNiAPLydM+E7kB8T:/rmivuG+BcpCJcR3jxn761EHsc
Checks for missing Authenticode signature.
resource |
---|
72f69bd8cc395609c6768758f8f93fd2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ