My_ini
StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
de3ab2d89243ec1fe6c96d649302f8a4_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de3ab2d89243ec1fe6c96d649302f8a4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
de3ab2d89243ec1fe6c96d649302f8a4_JaffaCakes118
Size
403KB
MD5
de3ab2d89243ec1fe6c96d649302f8a4
SHA1
f6a0b51dab154dd48a19f363bf8fb933dbe8e41f
SHA256
935a7e539b1127ce9919951016065540a3f2ab5bd4fd6a655bf46032fdcef03a
SHA512
d88a96f6b38b376a42a410aa223bd639339eb0c53c54ebc337b9d545abf7cdfb60ee38ee26ddd18e45356f6a396f20f548dfb3806d7901cfdf479d581a6376b5
SSDEEP
6144:/Ge+P44wDIo/dAHBTDy1bGQm+CW3e0dZfFgCZTdsmnElHdiHhy3sEwKIxKqS:ee+P44wfdAxyt1dTdxGmnO9ghy8EbHn
Checks for missing Authenticode signature.
resource |
---|
de3ab2d89243ec1fe6c96d649302f8a4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
My_ini
StartHook
StopHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE