My_ini
StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
a8d481da1cf07648b6e8f39076db51fb_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a8d481da1cf07648b6e8f39076db51fb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a8d481da1cf07648b6e8f39076db51fb_JaffaCakes118
Size
424KB
MD5
a8d481da1cf07648b6e8f39076db51fb
SHA1
3bba2c8b66e64ded54024467a793ca81b0114a16
SHA256
d11de6157edc98f1ad1528a1eab20b3aeb064ac322fbce654ebacc00b420299a
SHA512
25463f213ecb4134009c59ff29e70785409b2dbe60e68277f9518f64f334c87c22fc42bbf8584f55de515551397c608a33a9641f04b6f79d466f415e7d896f62
SSDEEP
12288:pKkewsOEm+ctiMTH/1dTdxGmnOCXAsUKH8zlx:pKysLmF3dTH7RNH8X
Checks for missing Authenticode signature.
resource |
---|
a8d481da1cf07648b6e8f39076db51fb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
My_ini
StartHook
StopHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE