ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
7718e424bf806b3c7eda35524dcb5452_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7718e424bf806b3c7eda35524dcb5452_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
7718e424bf806b3c7eda35524dcb5452_JaffaCakes118
Size
5.3MB
MD5
7718e424bf806b3c7eda35524dcb5452
SHA1
75340d8e61f14fbb35700465ce40d398fe70ff31
SHA256
4408b6ab2f79d0efcef30386c94caa7bd429b006bdde82b9babf08dbd55b43fb
SHA512
6ff26f524ef7d4013cc76af6e117abea0d514678d4d19b48f98f2901c6101d7507fab812da489c403ee585738c40b8fffcab12d72b6b2099bb65ca9c16d16c62
SSDEEP
49152:bHeTlP2+MMzF0UaK1Nl5YN4gZCCQCM0Cla1PrIHsKPe8FLfM9tvnq1ucKMr0+b7c:bmNMA0o7YZQCM0nkHDLXZbbdRiOxj
Checks for missing Authenticode signature.
resource |
---|
7718e424bf806b3c7eda35524dcb5452_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE