HookOff
HookOn
PostURL
clickquyu
killdnfexe
writebat
writeurl
Static task
static1
Behavioral task
behavioral1
Sample
018888f50b9c77ddcf6498719e1debaf_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
018888f50b9c77ddcf6498719e1debaf_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
018888f50b9c77ddcf6498719e1debaf_JaffaCakes118
Size
28KB
MD5
018888f50b9c77ddcf6498719e1debaf
SHA1
088dc3508e1930a122035b1ce69d04cc4436a3db
SHA256
1a8a2e60b82fce06544faf9367202191e0657d9531e7077a28b99760030a5764
SHA512
09667f95d94acfc410b63797256d77e141f44d7d6f6b28d1ec18e6a54ed4ee0769c8a202db565298bf577f49cbe0a3b69341e794e53255be2ec6560ae4e5df04
SSDEEP
384:EEAHxUSSqujzEKnGQeokkVX0MxCtcQNROkpEkKPov2kvYJM+w9mXBaAHKoM7wY:yKSSqu3E0GQIk50mCDFJAJp8AqoMs
Checks for missing Authenticode signature.
resource |
---|
018888f50b9c77ddcf6498719e1debaf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
HookOff
HookOn
PostURL
clickquyu
killdnfexe
writebat
writeurl
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ