WSPConnect
WSPStartDown
WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
ddac5b92abf060e50942de16a0bc8ebc_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddac5b92abf060e50942de16a0bc8ebc_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ddac5b92abf060e50942de16a0bc8ebc_JaffaCakes118
Size
22KB
MD5
ddac5b92abf060e50942de16a0bc8ebc
SHA1
2e5a7aeadf20381b255f7d0b52a9a0310f83a871
SHA256
974987d5dad70c7a2bfb0b717a2a745e63a8898b3def28a82a98063e514c5151
SHA512
974fa4d737750f5e9eaa263858180759e0e07ad0559721b2aa1b021baf515d07270e4967489e3ea38e7ca592d5d15d4644f969c59b75ee3a3055b7d19f2eed4e
SSDEEP
384:NSMBH2vDfL6NWPtjtZCA7h1BF7gvaIXfNQwMTak4JbwwRs:NlBH2jGNWPUoxnQ5MTak417Rs
Checks for missing Authenticode signature.
resource |
---|
ddac5b92abf060e50942de16a0bc8ebc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WSPConnect
WSPStartDown
WSPStartup
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE