FixIP
RemoveOlympicAD
Static task
static1
Behavioral task
behavioral1
Sample
d633ddbace785008ca02d5987962ea3d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d633ddbace785008ca02d5987962ea3d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d633ddbace785008ca02d5987962ea3d_JaffaCakes118
Size
158KB
MD5
d633ddbace785008ca02d5987962ea3d
SHA1
110f720262ceccee277f39d7e058e8c559f4ef95
SHA256
ba91ed993caf4dfaf3b4006bf964079eba91054345ee2f59f1bfd111088a7f3d
SHA512
2a68a8132dcd583bbe2c6d3b9687a73c7bd9a14e1e6b725181da4625bba1e9bfd8e96c81f6e12ab535f4d961313e991548a70a559d8790cf49910a3dc28e70df
SSDEEP
3072:BCHzo4KAv2jgpSiBkkKmxkHFdaHfdnnMCEXA95l1WaCr8WRSUGXO:4HhOgpxBkkoGFnMCN5Whr8Sp
Checks for missing Authenticode signature.
resource |
---|
d633ddbace785008ca02d5987962ea3d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
FixIP
RemoveOlympicAD
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE