ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
8c750446e03dea416a4a8d097677b36c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8c750446e03dea416a4a8d097677b36c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
8c750446e03dea416a4a8d097677b36c_JaffaCakes118
Size
5.3MB
MD5
8c750446e03dea416a4a8d097677b36c
SHA1
6bb915c040fcbc6200da857a8ef067ee5c27683a
SHA256
6c3806e57b8132a782b74b35bdd410d041097d21d9c92b216648b590a6e3f9b9
SHA512
691ee43cde19db1dc261916b89c4549b9b23dafa38a33436bb99c2eee89af651fb0c7152db1854e8709c0187710e3b74d30bfe919a80c678a40f0f3b4a4f29fd
SSDEEP
49152:bHeTlP2+uMzF0UaK1Nl5YN4gZCCQCM0Cla1PrIHGiPe8FLfM9tvnq1ucKMr00b73:bmNuA0o7YZQCM0nkpDLXZ5bd2iOxj
Checks for missing Authenticode signature.
resource |
---|
8c750446e03dea416a4a8d097677b36c_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE