ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
bb15fb871a40df7115a760f9b4bc0656_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bb15fb871a40df7115a760f9b4bc0656_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
bb15fb871a40df7115a760f9b4bc0656_JaffaCakes118
Size
5.3MB
MD5
bb15fb871a40df7115a760f9b4bc0656
SHA1
7806d2bd0360fc9edc68cefc2aad2b9934e2652a
SHA256
9bd94c760c994f882f6fba550e1963ed74e7ebab129e7159333975f563ba4c6b
SHA512
eb9d89a83e4fcd3a0a9d12f89c8aa87943d56299fb2a343e4556ddf2044078a6b2117e7182a389e69697692915520aada0887c058a2bd2a50c5c903cc9e5d43a
SSDEEP
49152:bHeTlP2+/MsQ0UaK1Nl5YN4gZCCQCMECla1qrIHs3Pe8FLfM9tvnq1ucKMr0+b7e:bmN/U0o7YZQCMEi8oDLXZbbdbiOxj
Checks for missing Authenticode signature.
resource |
---|
bb15fb871a40df7115a760f9b4bc0656_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE