WinOff2EX
WinStart2EX
Static task
static1
Behavioral task
behavioral1
Sample
a40686e49846065560a26c57b4d2a5d4_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a40686e49846065560a26c57b4d2a5d4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a40686e49846065560a26c57b4d2a5d4_JaffaCakes118
Size
49KB
MD5
a40686e49846065560a26c57b4d2a5d4
SHA1
4820fdb412488b88908630c553cd0cbc378fd3a7
SHA256
46f1093dd101b013360bb050a20746393a406962d4095741a736d9da89474177
SHA512
fa6c651c0e789b735f54ad27fcdc9380ca91a1a939b89ada0b196898ee381c853d7260d9d66fcb3cc4054767bb5b2d277160f3db3b5ab32a3db23ff40cede0f7
SSDEEP
768:syUqhmQIIsDzIN9sDQGJ8NZ0twjrG+Pmo/KI2MERUwXUkK81j553lZ:rUqhmQrIPDXSZrt+zIdERUwXUOP5
Checks for missing Authenticode signature.
resource |
---|
a40686e49846065560a26c57b4d2a5d4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
WinOff2EX
WinStart2EX
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ