@@Dlggetsector@Finalize
@@Dlggetsector@Initialize
@@Dlgntfsbootrecord@Finalize
@@Dlgntfsbootrecord@Initialize
_NTFSBootRecord
__GetExceptDLLinfo
___CPPdebugHook
_frmGetMbrSector
Static task
static1
Behavioral task
behavioral1
Sample
d337f11f68de86ac4e02a4e264cf9686_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d337f11f68de86ac4e02a4e264cf9686_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
d337f11f68de86ac4e02a4e264cf9686_JaffaCakes118
Size
665KB
MD5
d337f11f68de86ac4e02a4e264cf9686
SHA1
36fdaa51305b5d1730da1483caa91d35af04f55e
SHA256
cec706bea32cbe105b5d6c4334a4d6974a61b72d569bb141f8184857c1ec09c3
SHA512
31bb0961d11bbce75658c70bc68e0aaa3746a8fd066b7c3d061af5160359a7e2aab7688fec0eefa6ced047719349d1aaccbd74792df71943e14e203c23dd1621
SSDEEP
12288:CmCq4cFulomR6nPh7RSVo9jLw55bASsO9YQVcZL27Vk4my0b6+a:Cq4c+R6PhDwXbArO9YQVcFkk9Bm
Checks for missing Authenticode signature.
resource |
---|
d337f11f68de86ac4e02a4e264cf9686_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
@@Dlggetsector@Finalize
@@Dlggetsector@Initialize
@@Dlgntfsbootrecord@Finalize
@@Dlgntfsbootrecord@Initialize
_NTFSBootRecord
__GetExceptDLLinfo
___CPPdebugHook
_frmGetMbrSector
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE