StartHook2
StopHook2
Static task
static1
Behavioral task
behavioral1
Sample
dda79dac211b4776220fa387350aa851_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dda79dac211b4776220fa387350aa851_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dda79dac211b4776220fa387350aa851_JaffaCakes118
Size
31KB
MD5
dda79dac211b4776220fa387350aa851
SHA1
1336d1f5d3b59ad86466577f708c91f4e8b692eb
SHA256
52bf0dcfdc85a9ac0eba0c2652719714d310d47cbc504f59b6c990154f943206
SHA512
c9f334bea7a38cb58682d1cf378764bb3264ed9c5146a2d3a16cd6e743d6a323ccab6a3778bbfd3bce7aaaf59e145551e37b1e189dfd879d681d46778c68f947
SSDEEP
768:Q5AYLqa4v51nW/fgkXq/5i6dpps5FyoyGjrMA91lCaZ/A7P9b:QDGa4v51nW/fgL/pvpaFmGfMuAaW71
Checks for missing Authenticode signature.
resource |
---|
dda79dac211b4776220fa387350aa851_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook2
StopHook2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE