JmpHookOff
JmpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
a7d41e8572f3a397370472884be6630f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a7d41e8572f3a397370472884be6630f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a7d41e8572f3a397370472884be6630f_JaffaCakes118
Size
25KB
MD5
a7d41e8572f3a397370472884be6630f
SHA1
7b7c103d136f7bec7d4d938ffae40807e61202f5
SHA256
435a06c402d3df9c27b32fd8a5dec9540dd020b85db730d75f1126180aa31486
SHA512
21618d9a2454fdb8ae16d330d781942e44c209cf6f77206c2f7e36a1df121afc31bed77edd4d0315c182209a942d7e4f920f83865949805e1cbf3e45ce70c882
SSDEEP
384:s+Ff/Slqx9w20gbvA4rl261wL5rmXw8pLzlaXlkrgJpGcOwNW1Lo3a4qdnYcW:5Ff/Slqx90gbvA4A6qrmXuacpe0Z8nYF
Checks for missing Authenticode signature.
resource |
---|
a7d41e8572f3a397370472884be6630f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
JmpHookOff
JmpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE