WSPConnect
WSPStartDown
WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
b5dc1505e3a8e2097b46a7cb256b9487_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b5dc1505e3a8e2097b46a7cb256b9487_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b5dc1505e3a8e2097b46a7cb256b9487_JaffaCakes118
Size
26KB
MD5
b5dc1505e3a8e2097b46a7cb256b9487
SHA1
43329c9a2532b975dc6b9ea88b89141f27ccf19a
SHA256
2b606b67c319435efc65602312f5f375858b94ae4908a05c679b9530283bf06e
SHA512
030d4c12f115c18d6e317160aa9f9d930a2c9f8ff66c4f9cd9d963918fcea0e4ed4d9e6125720cd09df01a0bed1b9c2606d7b41694f3e9727b574e96edc58852
SSDEEP
768:u+LM2mStViYp4Ce0R+VrZxRfhlyEi99c3:u+g2mSDiYp4CTGZxRplyEOc
Checks for missing Authenticode signature.
resource |
---|
b5dc1505e3a8e2097b46a7cb256b9487_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WSPConnect
WSPStartDown
WSPStartup
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE