ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
bc10cf45af9df18a8c6c996018d917ab_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bc10cf45af9df18a8c6c996018d917ab_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
bc10cf45af9df18a8c6c996018d917ab_JaffaCakes118
Size
5.3MB
MD5
bc10cf45af9df18a8c6c996018d917ab
SHA1
7afec499158074f42f64a076d6e95ded3e8a4d64
SHA256
1b677823cb4655df1412d288a7521a28d8800add6813b6ad96bbcfed55890405
SHA512
bea84a41495e87e8a78ec9f4b851193b99a5d69c0ee62cd50f8ae76a2dd00ccc1ec5b3178a68da318f5b443981f33d4d793eeed64d29a9755a9e3a242df91567
SSDEEP
49152:bHeTlP2+ZMJF0UaK1Nl5YN4gZCCQCM0Cla1PrIHsiPe8FLfM9tvnq1ucKMr0+b71:bmNZu0o7YZQCM0nknDLXZbbdoiOxj
Checks for missing Authenticode signature.
resource |
---|
bc10cf45af9df18a8c6c996018d917ab_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE