g_bExitRoutine
g_dwRoutineThreadId
g_fParam1
g_fParam2
g_fParam3
g_nFuncCode
g_nParam1
g_nParam2
g_nParam3
g_szBuffer1
Static task
static1
Behavioral task
behavioral1
Sample
c27ad503f7579c1cbcb8cda49bb0f69e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c27ad503f7579c1cbcb8cda49bb0f69e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c27ad503f7579c1cbcb8cda49bb0f69e_JaffaCakes118
Size
536KB
MD5
c27ad503f7579c1cbcb8cda49bb0f69e
SHA1
1b65e0c2ea75440bd43bbfa5c077a017a805bb59
SHA256
5e6cc2eebff29e044df60366eccb1a6ace5f441d7c7f193b8ab359679af77a1a
SHA512
d3035af2ddd58222c61fbf13972649b03aac121a66fcc65e55b395913a9b8d8bf8f1a972ab4fcd6744ccb86941df1fcf465a6ca466dff1954b4e63223b8382a8
SSDEEP
6144:WzVz4V2k5TeUDQJkNxvW9v5wlgInmCg0j2b2HTPlccgVpH3:OVS5CUDjcR5s/m70jOweNzH3
Checks for missing Authenticode signature.
resource |
---|
c27ad503f7579c1cbcb8cda49bb0f69e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
g_bExitRoutine
g_dwRoutineThreadId
g_fParam1
g_fParam2
g_fParam3
g_nFuncCode
g_nParam1
g_nParam2
g_nParam3
g_szBuffer1
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ