StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
850d4edc83f30454316275ef4fcd0745_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
850d4edc83f30454316275ef4fcd0745_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
850d4edc83f30454316275ef4fcd0745_JaffaCakes118
Size
38KB
MD5
850d4edc83f30454316275ef4fcd0745
SHA1
413560579cdebf0d22faa8b74b3080a6089b9d42
SHA256
947525aa3ffefdf8a042e605027429b0cc1cb828f23cc65409c3ef36ba9042d6
SHA512
026ae1d72e9fae4444a9f9ecb9a5994ae378e690fd35fe64b466d55e699ab4f853530a0cf45186c3aa19065dc92a66b2ca7cd667cabb52cb420796ce4698a909
SSDEEP
768:RyIqvQQcGrYUfQ1m1eusQUNNl2NY97olt/iWrj5Jn05i:IIqvQGrBnU447mAOm0
Checks for missing Authenticode signature.
resource |
---|
850d4edc83f30454316275ef4fcd0745_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ