TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
da1fdc3704edb7fe4917531371a87bf6_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
da1fdc3704edb7fe4917531371a87bf6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
da1fdc3704edb7fe4917531371a87bf6_JaffaCakes118
Size
7.0MB
MD5
da1fdc3704edb7fe4917531371a87bf6
SHA1
b6382add56440cbe0c1d48532455cad8e89b345f
SHA256
947a11825f43b5f4903543a8d1d177220ff6cec8d7153e52add309290d760534
SHA512
fa3a830102ff1a81946069811e3ce494d33c8b7c26156005850e2110ad3844d2e27dd35157519b46ec1814972155334b3f7aa029bfb121254328a6db68769b25
SSDEEP
196608:Rma9bmMVTuwYBgO9BRXq8ww42WSrANHlBaLsOSorZ3dz:vTuwA99XBm9SrANHlBySorJB
Checks for missing Authenticode signature.
resource |
---|
da1fdc3704edb7fe4917531371a87bf6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE