ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
d1a9b50daa34e343d3f014467eaa2f31_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1a9b50daa34e343d3f014467eaa2f31_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
d1a9b50daa34e343d3f014467eaa2f31_JaffaCakes118
Size
5.3MB
MD5
d1a9b50daa34e343d3f014467eaa2f31
SHA1
175001bb21a245ec7c18ec8f0be6bfc3c1624a6d
SHA256
2471f17a9bd9960f3b6e734f3e9f59706048cc760317c962e27c714adc7525db
SHA512
89e7a33521d52c31d50898f4d213739f7acf63dc88d63c9dfd99d2c1ad4d7c3d30e0af4b0c174901e497c132329cded76db01f783f0659fa6ec03f9db695a2aa
SSDEEP
49152:bHeTlP2+MMzF0UaK1Nl5YN4gZCCQCM0Cla1PrIHsKPe8FLfM9tvnq1ucKMr0+b7r:bmNMA0o7YZQCM0nkHDLXZbbd6iOxj
Checks for missing Authenticode signature.
resource |
---|
d1a9b50daa34e343d3f014467eaa2f31_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE