ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
8da596207e252d1ae1463c82713cac4f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8da596207e252d1ae1463c82713cac4f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
8da596207e252d1ae1463c82713cac4f_JaffaCakes118
Size
5.3MB
MD5
8da596207e252d1ae1463c82713cac4f
SHA1
a88a82e2d784f6d115a45f7c4392bc350567b9f8
SHA256
14fb441d97441c9da7b1d5d5228dc3d29646906682a8c1c1cbd047898b2d6308
SHA512
77747c3ba1c587ce26322e046e6021faf8be063412659845d898487bdda6e97adfe5cc4d6dcce748e29f3b2254e7f8afe784d5e5a074d8ae6258124d3ab469dc
SSDEEP
49152:bHeTlP2+/MsQ0UaK1Nl5YN4gZCCQCMECla1qrIHs3Pe8FLfM9tvnq1ucKMr0+b7q:bmN/U0o7YZQCMEi8oDLXZbbdLiOxj
Checks for missing Authenticode signature.
resource |
---|
8da596207e252d1ae1463c82713cac4f_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE