??0CProhide@@QAE@XZ
??4CProhide@@QAEAAV0@ABV0@@Z
?fnProhide@@YAHXZ
?nProhide@@3HA
start
Static task
static1
Behavioral task
behavioral1
Sample
95b26c111106dfcf64241f1bea7f239f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
95b26c111106dfcf64241f1bea7f239f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
95b26c111106dfcf64241f1bea7f239f_JaffaCakes118
Size
28KB
MD5
95b26c111106dfcf64241f1bea7f239f
SHA1
51b2f2a698f5af9c7a2779c245c1d866acb3f4f1
SHA256
a81dcd518cbfe6c4ae284f073d7f2202f644f2a26559f55898b612b3e3067650
SHA512
6aff50140f04e3c8fea764722e47abca5eed64d3addee274b6330210baf609bd9b1942f87e3c08321710e7b3bf33b3de281ef441cb1de40a8bc23e942de8183a
SSDEEP
192:em8myd6lpOdNk7Yy8le/8Zz+l7KIT5whEpfQIpF1DSP+IPN3:OmydSpOdNtJz+l7K+iqvfDSGsN
Checks for missing Authenticode signature.
resource |
---|
95b26c111106dfcf64241f1bea7f239f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
??0CProhide@@QAE@XZ
??4CProhide@@QAEAAV0@ABV0@@Z
?fnProhide@@YAHXZ
?nProhide@@3HA
start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ