ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
8db7ebea54e30d40edfee9aa057da107_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8db7ebea54e30d40edfee9aa057da107_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
8db7ebea54e30d40edfee9aa057da107_JaffaCakes118
Size
5.3MB
MD5
8db7ebea54e30d40edfee9aa057da107
SHA1
97b7ebc1c2b4e269a23c0a887130f90147c90f11
SHA256
076b2d629d7571b3920a390867c3670c36e73ea3d7fb7bc781b09d388ad6cce3
SHA512
79b0aeeffb0be817a422310322d6e461048423e92942292dc8f0ff2bea6b357a87b9c77a0e46fac686145c6cdb8699087bb26d4caa2d54ceae65c058e2f45f88
SSDEEP
49152:bHeTlP2+/MsQ0UaK1Nl5YN4gZCCQCMECla1qrIHs3Pe8FLfM9tvnq1ucKMr0+b72:bmN/U0o7YZQCMEi8oDLXZbbdTiOxj
Checks for missing Authenticode signature.
resource |
---|
8db7ebea54e30d40edfee9aa057da107_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE