WSPConnect
WSPStartDown
WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
b66e53b3b3e2862d957504fee18dc6e2_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b66e53b3b3e2862d957504fee18dc6e2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b66e53b3b3e2862d957504fee18dc6e2_JaffaCakes118
Size
29KB
MD5
b66e53b3b3e2862d957504fee18dc6e2
SHA1
7cfb42556c02163eae811eb35c29dea392ac2a06
SHA256
1eda223eb69319ca7da8f1526054a8d11edae73dd77e6b32861b7a766f994662
SHA512
07b648e69336180d0f80d2bfe3bbd5f2163d0cf321a488f6ecd3a1b61b4e9136ddf28e7cf0113842080a5b8b81932054d0b637aa6b920c43a727bb622e305666
SSDEEP
768:JrL2kb77c58IgdVDN944dDKsvFD2fYDEJKu6h:J32Y7agLv4E7vx2kE
Checks for missing Authenticode signature.
resource |
---|
b66e53b3b3e2862d957504fee18dc6e2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WSPConnect
WSPStartDown
WSPStartup
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE