sityp
sitypnow
Static task
static1
Behavioral task
behavioral1
Sample
ac5b6fe13591aedb2058f07aadb81320_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ac5b6fe13591aedb2058f07aadb81320_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ac5b6fe13591aedb2058f07aadb81320_JaffaCakes118
Size
85KB
MD5
ac5b6fe13591aedb2058f07aadb81320
SHA1
f02e6cd0bc4389cd853736244b5ab493ce9ad903
SHA256
e45d55f14d84de053b6976b4b0c5733969103db1fa0d5823657af30bc54a8a76
SHA512
fe9a527399f6091665a54caa329cf5892e67a0f477d36f7431e5c14ef8fa350913602d1376ac58f85fd982935e7ec691b0b72261d1463af460d3562017aa7cd0
SSDEEP
1536:1ADwYWSfyRVNFFGHIGcN5ijdsjfyXA2JwTcLlG+Oo43yT8R:1qP14VRGHyNsqyXA+M+OCM
Checks for missing Authenticode signature.
resource |
---|
ac5b6fe13591aedb2058f07aadb81320_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
sityp
sitypnow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE