estableceproc_dll
principal
Static task
static1
Behavioral task
behavioral1
Sample
962a6cf166b1ed7477ccdee07416a7bf_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
962a6cf166b1ed7477ccdee07416a7bf_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
962a6cf166b1ed7477ccdee07416a7bf_JaffaCakes118
Size
24KB
MD5
962a6cf166b1ed7477ccdee07416a7bf
SHA1
abcd20fd18bc41b3a35a297000ccd5a163666a9e
SHA256
da5d778facf6b61a1fd829569eef841499974a60f5ac34a996de94386aea4367
SHA512
000ff7121c9c32e07a9043e8f701761b9f45841bf0657ea339f06c1c62a266be2c23c53204a9aedb691321d07a46544d269e53206440b0901878b197f09f2dfd
SSDEEP
384:p5tgGlQ9zShYuvumdTODWArgn//3e9hWW0Z58rhhtE/O1R9a:p5trWQayM0Pe9hWW0Z5Qhy/YR9a
Checks for missing Authenticode signature.
resource |
---|
962a6cf166b1ed7477ccdee07416a7bf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
estableceproc_dll
principal
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ