TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
b79178a04ac94193453944dd318ce43a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b79178a04ac94193453944dd318ce43a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
b79178a04ac94193453944dd318ce43a_JaffaCakes118
Size
7.0MB
MD5
b79178a04ac94193453944dd318ce43a
SHA1
b85d636309a168e95ac4509d44e87900584db97e
SHA256
da784579e1f3d2c4b08b711d46755b2b67cf8b8c6fc2431f3c8662fa5e890923
SHA512
0454b6e619c6b2f3165451402870a5db7050ee42181ab2db6ceec1cc3559fa85b1df11598ae8055b7550348e435256b25a4837bf01272f918a24c7243b4b54de
SSDEEP
196608:axkEIA1dTpzWoTCu8phYg2069tLVEAq+yWm/Dgs:CkH2d9FTl+YL0WEAzmks
Checks for missing Authenticode signature.
resource |
---|
b79178a04ac94193453944dd318ce43a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE