fork
forkonce
Static task
static1
Behavioral task
behavioral1
Sample
a5ccbe1d22be951339eb3a5bedd35457_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a5ccbe1d22be951339eb3a5bedd35457_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a5ccbe1d22be951339eb3a5bedd35457_JaffaCakes118
Size
122KB
MD5
a5ccbe1d22be951339eb3a5bedd35457
SHA1
d1742bdcbb310225610aa211fc0ca217df420902
SHA256
fd442860ab63b3133e09ceb7c97708f8815d48980a53bc906da48dc476b1c76d
SHA512
f649d377919eabf7acf40f841f62449c4132678e28799accf3d344fc8985ec559c4008eccc9c78d1d60e4bf9bcdabf353be4ead0b63353569504aa9f4c157e7f
SSDEEP
1536:DSOyQruD4YzXTGBm1b/s1nOrQuTPv2kJ4Uqi/1NYR7eXJdmr317yb8BYCDw8MaRw:nc4YnOTOE5W4ri9NY0ir3dBpNf5gYiwc
Checks for missing Authenticode signature.
resource |
---|
a5ccbe1d22be951339eb3a5bedd35457_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
fork
forkonce
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE