StartShell
StartWinShell
_DllMain@12
start
Static task
static1
Behavioral task
behavioral1
Sample
875c8bd3da6e6d30724b6ab16145a831_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
875c8bd3da6e6d30724b6ab16145a831_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
875c8bd3da6e6d30724b6ab16145a831_JaffaCakes118
Size
112KB
MD5
875c8bd3da6e6d30724b6ab16145a831
SHA1
d4b955f372387de7a9db35af39388229f30cf9c7
SHA256
6c2eec6609f897bba0a9df4cb2d9cb8560bb277dcae8d4c6233576cc3b987e79
SHA512
bb66c9c36cf22d799378dd4e241f02a94d5bfa255c617129989adbad4943267c93fd29bd4710c8b528cc21f2bfa28f2b9347b0dfef80878a8d0d0b9296e85019
SSDEEP
1536:CyAu0gW86S5pQRrB/oHuEwpJLgurokkTKlgg2DB3/W9EExa4GLGKZH93S191HC1n:N0gW3S5OCuFJcHP347CVO1HCVz
Checks for missing Authenticode signature.
resource |
---|
875c8bd3da6e6d30724b6ab16145a831_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StartShell
StartWinShell
_DllMain@12
start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ