@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
def4afc770904fd84e23002a65c8970a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
def4afc770904fd84e23002a65c8970a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
def4afc770904fd84e23002a65c8970a_JaffaCakes118
Size
39KB
MD5
def4afc770904fd84e23002a65c8970a
SHA1
d41c4d39d0bda9c707b36d97deb7cc07d3723697
SHA256
6e6e0feb06095713d268a186bca61e6265df71f3b04a60d18960e19e63aeb6ab
SHA512
0ac8421de4975533860064e94bac20e32b668111ea3f104824745b9417a65d68c45f4283006b4a0da70a46a145d32b16e23a049dc4fa5da54f64eef89f5cf07d
SSDEEP
768:FAwQ5wjNGqTnE4xfL6mTs4o6SL2tI1S+6Bj9m8B8fL4Ncas29+5NKmRTKg:FhQO5GentUmQiSL2O1H6Bj9T2ic72U5d
Checks for missing Authenticode signature.
resource |
---|
def4afc770904fd84e23002a65c8970a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE