CreateHook
DeleteHook
Static task
static1
Behavioral task
behavioral1
Sample
b319166214654af8fc05675befdfb1f9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b319166214654af8fc05675befdfb1f9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b319166214654af8fc05675befdfb1f9_JaffaCakes118
Size
7KB
MD5
b319166214654af8fc05675befdfb1f9
SHA1
0ace06d0c8bf68f8a082caff39039590ca2613cc
SHA256
957631e80c511d33b0c3468256a2d9373d35edeb4ea36f1c56ad094da923cade
SHA512
7ff00a86cf6b4f822387bdc4346c4c6bc909e10364d4c9582071ff5044dca6d8f594415a2c8c4e385115d94b06a5d9365644203da120be4c08de2bcfc58f2520
SSDEEP
96:nPI4WiJu8aFwiFtih01Rl532eJWahK4oDImBxJ:ndW0u8/Jh0Dl532eJWao4i/J
Checks for missing Authenticode signature.
resource |
---|
b319166214654af8fc05675befdfb1f9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
CreateHook
DeleteHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ