DriverProc
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
f5f682f9f3132c3918f3dbb15059c515_JaffaCakes118.dll
Resource
win7-20240729-en
Target
f5f682f9f3132c3918f3dbb15059c515_JaffaCakes118
Size
73KB
MD5
f5f682f9f3132c3918f3dbb15059c515
SHA1
ccdc2f8ba948b3da43b8bb910c6858a0e8f390d4
SHA256
a869e7cb5ec0f413c97cb24b1647142780233c6c93798deb12a1fb060a827ed5
SHA512
42e7af726dc62df6b07427dd7d611fc0bc0ae8c943755de7168ce64b450604af4e168f9470dace12ac7ac785f09add37894e462cba476246e352ddcae4384151
SSDEEP
768:Ipq0Ig4o9+se8HhXNmxAt4rBD7Itm7MA2SJF9weqqJiu7C7JB4aSN5DsjX:2ZG8Hh9gA2t7ItrkqqcuC7bUPsjX
Checks for missing Authenticode signature.
resource |
---|
f5f682f9f3132c3918f3dbb15059c515_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DriverProc
modMessage
modmCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE