WSPConnect
WSPStartDown
WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
0014ad6017b49f633165f15d9169ad4a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0014ad6017b49f633165f15d9169ad4a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0014ad6017b49f633165f15d9169ad4a_JaffaCakes118
Size
34KB
MD5
0014ad6017b49f633165f15d9169ad4a
SHA1
bdb83cbd6ab8d2ed8c5d1f96562882b690228f9c
SHA256
7d76ce1309f3552a0bbaefea1908679401ae63dd59c47b04b2fbf0da3c9783fe
SHA512
c4936982f8d73df7f83f0dd6a05cb023ee06edfa24d5d5019657d378192998539478297b8b3d66377e6887e1b16abfa166f3f9b12c251b8735562db809af5fd4
SSDEEP
768:kKv52A3ASVH/ryz/eQHEbEtB0KweGnbqn5U+QRi:kKB2A3AuzQz3j9GnAs
Checks for missing Authenticode signature.
resource |
---|
0014ad6017b49f633165f15d9169ad4a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WSPConnect
WSPStartDown
WSPStartup
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE