ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
f641dc4bd844fdfad4e290d9b3aeee65_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f641dc4bd844fdfad4e290d9b3aeee65_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
f641dc4bd844fdfad4e290d9b3aeee65_JaffaCakes118
Size
5.3MB
MD5
f641dc4bd844fdfad4e290d9b3aeee65
SHA1
704f45e139ca7b16e300f7892d92ee20ef4967f6
SHA256
eeff79ad987236de7589e12048fade0b0eefc6e6c72d19f92ce0360f90d42bb0
SHA512
c6cd84013cb9650254b3bb19d48c4b3ab5c9baead52449e2739656c819637a05d8acd551b8b3c5610dd1f84f2525aecdfa1ce8bd493a360195e934522e6e0b3f
SSDEEP
49152:WHeTlP2+MMpF0UaK1Nl5YN4gZCCQCM0Cla1PrIHsKPe8FLfM9tvnq1ucKMr0+b7I:WmNMO0o7YZQCM0nkHDLXZbbddiOxj
Checks for missing Authenticode signature.
resource |
---|
f641dc4bd844fdfad4e290d9b3aeee65_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE