WinOff2EX
WinStart2EX
Static task
static1
Behavioral task
behavioral1
Sample
e16edfef4bc69205f1227c51d424ece8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e16edfef4bc69205f1227c51d424ece8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e16edfef4bc69205f1227c51d424ece8_JaffaCakes118
Size
49KB
MD5
e16edfef4bc69205f1227c51d424ece8
SHA1
1dcc6e63c6e56d6c55461cb35d9feb6bf5ee6229
SHA256
cd4ceceb1233204c75188ae8a06515807db151bb9d72f02680e74de0607c098b
SHA512
10abe6f1f1148a108b44130db31018cd35a3a0c90501b27c572eb2e6e3cc83b54b78fbe2b4c732038967fe749a64312ff39f93fdf0633339a29ff25a1350ddd6
SSDEEP
768:syUqhmQIIsDSSJsKGcBYz8qM8Z5nUpzIiKXgBPdEeXAb1BkwH+bmXv3lZ:rUqhmQrh1QWz8v8nUdI5gBPe1ywcmXv
Checks for missing Authenticode signature.
resource |
---|
e16edfef4bc69205f1227c51d424ece8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
WinOff2EX
WinStart2EX
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ