DLLInjectedAdd
DLLRemove
Static task
static1
Behavioral task
behavioral1
Sample
ea0f3d9f60e35721f1a63498c6e806e5_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea0f3d9f60e35721f1a63498c6e806e5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ea0f3d9f60e35721f1a63498c6e806e5_JaffaCakes118
Size
33KB
MD5
ea0f3d9f60e35721f1a63498c6e806e5
SHA1
2ce56264e5ff7274895b5e9676cb2c283b5760fa
SHA256
7ea58a5bde56fdd51b66d076adf3963163d0d71d65b299afdda36d28ecdd1f07
SHA512
18cb8ff7d6329d6b2b2eda26878b860a22fbad877a6e399d41a04f4a07fc7346a568670620b721b86783bee72e74384e7f83d561e58c59c69cc976cda5ae4a2b
SSDEEP
768:S+aoi6qZOpQB5ZpOc06HCMN9GT6RJ5BHUEy2YEZZEoO:S+av6qZ4QxpP0AtNfRJ5BHxYp
Checks for missing Authenticode signature.
resource |
---|
ea0f3d9f60e35721f1a63498c6e806e5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DLLInjectedAdd
DLLRemove
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ