StartHook2
StopHook2
Static task
static1
Behavioral task
behavioral1
Sample
acbb0eb967a604cd4f82dc2cb589c89c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
acbb0eb967a604cd4f82dc2cb589c89c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
acbb0eb967a604cd4f82dc2cb589c89c_JaffaCakes118
Size
25KB
MD5
acbb0eb967a604cd4f82dc2cb589c89c
SHA1
1cf4fbafb630ef3d319f31ed21aa93100621a15a
SHA256
6c28a256780c91434a3364311dde1e0bc7fbbbbcffa9f64ed89698816ccabc9d
SHA512
6a15544311b2c8a3382747d60f5bbbe91c0b8cd54e949e302daa44b413791c64ede3e66f31a251d7bbfa63e79376bfa8192b840efcd3600df7c16beac1029c1c
SSDEEP
384:ErIbU5SFe8AMCEbA4Ql3dnjX9vJyh9cvm68c/MyjHX3TE4NwCWwZZfRUd4tvuAaw:q0wf3htBM9c3Z7HTE4Hfs4oF35YTb
Checks for missing Authenticode signature.
resource |
---|
acbb0eb967a604cd4f82dc2cb589c89c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook2
StopHook2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ