My_ini
StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
8a444df95f14975076aac57f2ed027ae_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8a444df95f14975076aac57f2ed027ae_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8a444df95f14975076aac57f2ed027ae_JaffaCakes118
Size
421KB
MD5
8a444df95f14975076aac57f2ed027ae
SHA1
2734e73770228f27dc3788135c56687fcf94d28b
SHA256
05425ead8c1325627102b2a7458bdafcf8bcc65a6da185ba3cf1e043eaaa7f1b
SHA512
24235c218d99a809ce4743ab89934454ceec927ccd187398225af9bade3591e82a93f15201c516b6646cbb1b9093ac0b4314f665fc42a6525874a0c479f08fde
SSDEEP
6144:bO9c9KUhewdHM3xLpi2LNfV2l9fCW3e0dZfFgCZTdsmnElE+7gmiJZ+yes4+adI9:bSURdsTLNta9d1dTdxGmnOE+ETv5tB9
Checks for missing Authenticode signature.
resource |
---|
8a444df95f14975076aac57f2ed027ae_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
My_ini
StartHook
StopHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE