ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
Static task
static1
Behavioral task
behavioral1
Sample
f9e7d8e62e965e86fd7ff0365ee09016_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9e7d8e62e965e86fd7ff0365ee09016_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
f9e7d8e62e965e86fd7ff0365ee09016_JaffaCakes118
Size
5.3MB
MD5
f9e7d8e62e965e86fd7ff0365ee09016
SHA1
b6af5c52786a319791ffe398d918c0b54da151ed
SHA256
426e071e8ad15a76c00eb39a8ecb7f46896d119ba3855c5229e9adbbda40ad91
SHA512
1d17f3f8cc083e8798e97bcffc1dc9d8e69fff25cb7690f88300ad659378fea916d95610cb5986b6f749ade847a41a648bb1f98079a877adece16020ee60eac3
SSDEEP
49152:bHeTlP2+7MhF0UaK1Nl5YN4gZCCQCM0Cla1PrIHGKPe8FLfM9tvnq1ucKMr0+b7J:bmN7u0o7YZQCM0nkRDLXZbbdkiOxj
Checks for missing Authenticode signature.
resource |
---|
f9e7d8e62e965e86fd7ff0365ee09016_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ZtlTaskMemAllocImp
ZtlTaskMemFreeImp
ZtlTaskMemReallocImp
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE