@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
Static task
static1
Behavioral task
behavioral1
Sample
8a7b1bd725bb30997e5234f93ac9e84b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8a7b1bd725bb30997e5234f93ac9e84b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
8a7b1bd725bb30997e5234f93ac9e84b_JaffaCakes118
Size
211KB
MD5
8a7b1bd725bb30997e5234f93ac9e84b
SHA1
79f459964799752b78ff0eb7af1d974e4ecd0dd5
SHA256
3fed388fb59ce8f9c960eea0545f7adaab2a4386f0b0591103008d5d02f70648
SHA512
f279c08a029fa1351b3e4f9103ea1df758115526f0f676793090ae861f5240f8bef42e3e148be9d7829331217ff2a4d772183b7a5a9cec84cb3298fdcf4508cd
SSDEEP
3072:kss0L8vyYujwi7ZiEwXg77Qyf/hR+uE7CQmLMScZNRBIlpTJViAbPZN:ksB8vyY4wiQrIsyBRSCVLlQRBIlhBjr
Checks for missing Authenticode signature.
resource |
---|
8a7b1bd725bb30997e5234f93ac9e84b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE