ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
b01c14d9b0527cc4caad321bd0305d20_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b01c14d9b0527cc4caad321bd0305d20_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
b01c14d9b0527cc4caad321bd0305d20_JaffaCakes118
Size
5.3MB
MD5
b01c14d9b0527cc4caad321bd0305d20
SHA1
f404ac49348b9e7e97194985e24af89b8070c49c
SHA256
e46e52d3394b5ddfee37fcee75bb6fa0e0f4859781f5aeaf3c7022ec3ffb0c58
SHA512
2e4475bca67efe0752920333d26e6a1da77ed06792a0b3a0ed7ef11f4a95363c658de6fe089a31b50ef0b4b777f72dd4fd1b54bc82784e7c6ddcdaed996d181f
SSDEEP
49152:bHeTlP2+MMzF0UaK1Nl5YN4gZCCQCM0Cla1PrIHsKPe8FLfM9tvnq1ucKMr0+b7R:bmNMA0o7YZQCM0nkHDLXZbbdkiOxj
Checks for missing Authenticode signature.
resource |
---|
b01c14d9b0527cc4caad321bd0305d20_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE