estableceproc_dll
principal
Static task
static1
Behavioral task
behavioral1
Sample
ff1551749f90864ae083677ceab7216e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff1551749f90864ae083677ceab7216e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ff1551749f90864ae083677ceab7216e_JaffaCakes118
Size
38KB
MD5
ff1551749f90864ae083677ceab7216e
SHA1
0ef9bb5d54ce7302d130e25b167ec8546c12be39
SHA256
082c8a7f05d471dcad9913a0551d788724f8610ad6407ec5d59c6035266d6c6d
SHA512
9da5943a664667e1875fa91f8e4cc1d7dafec19bf59e3334cc414232a7effe7560f9657b143fbac468b5f087c7e9b42038ab21c4e8a55dd6c92474adbf298c22
SSDEEP
768:VyUNmwR+ciSXMSXMsKO/R9BnHtAzb9W8Zirzg/:nNvR+cPcScsK4rBnHtAzbY8X/
Checks for missing Authenticode signature.
resource |
---|
ff1551749f90864ae083677ceab7216e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
estableceproc_dll
principal
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ