ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
ec1b5f7cd588937e593e87c8743c0118_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ec1b5f7cd588937e593e87c8743c0118_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
ec1b5f7cd588937e593e87c8743c0118_JaffaCakes118
Size
5.3MB
MD5
ec1b5f7cd588937e593e87c8743c0118
SHA1
7024b3789d95c53044445a30cab63d508f8819b6
SHA256
16dfed2257850284a8a7e23734f2d211bf71a3f46f347b0ec3b3cc441ed617ab
SHA512
c28b0306469c076b8ab503be9a05a2c26ce3b5db9c03e18a6e15789a4e97d2d14a460fb3e576af22c6e57a49cdc03b66604bb4e862baf6f5d21d754e8eaebe28
SSDEEP
49152:bHeTlP2+MMzF0UaK1Nl5YN4gZCCQCM0Cla1PrIHsKPe8FLfM9tvnq1ucKMr0+b7K:bmNMA0o7YZQCM0nkHDLXZbbdriOxj
Checks for missing Authenticode signature.
resource |
---|
ec1b5f7cd588937e593e87c8743c0118_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE