AutoRun
GetVolumeIntf
Static task
static1
Behavioral task
behavioral1
Sample
c86b58da8aea704875759260dcf3ac1b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c86b58da8aea704875759260dcf3ac1b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c86b58da8aea704875759260dcf3ac1b_JaffaCakes118
Size
41KB
MD5
c86b58da8aea704875759260dcf3ac1b
SHA1
dea706d5030cb75fc377c0c697482ef00e37959a
SHA256
c9a47b1f37559a2e127744605df7a88f14524e9ec5f8ca3d9f1649cc04e67727
SHA512
083e73bf64a7bda23f9ae6bff0ee9eb45960317ee487a9bdccf074d26641a83fcd94ea2e919e893588e6ef096fc712c581d03df235b5f059f86ffa761814567c
SSDEEP
384:sGCr7Ixgst/yzC5I6m3gohq4b/jNDQIrH2G+yXikjIG8fIeo62d0I4zp7hvwtmrj:bCr7At/vq6sgoJcu+G8HR2dFbNaZSa7
Checks for missing Authenticode signature.
resource |
---|
c86b58da8aea704875759260dcf3ac1b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
AutoRun
GetVolumeIntf
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE