My_ini
StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
056f7dccd4ca7b899f8b49092070ee7d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
056f7dccd4ca7b899f8b49092070ee7d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
056f7dccd4ca7b899f8b49092070ee7d_JaffaCakes118
Size
412KB
MD5
056f7dccd4ca7b899f8b49092070ee7d
SHA1
ef77c7c5e94751cee646ffb1fefb998f11ef7188
SHA256
bb39da8a6b9c7a5c73c66c5539e5d2a0b99b2c5e6ab96ab45d49eb80ab84342c
SHA512
db799734e0ae03ef1ad45048cb33f158797db7a784bc70ac8f897a4fd153524e9ccc307e1964cce434751082d0252be33a0cb2d28a09936ef86f7378d6f9a9da
SSDEEP
6144:9WV8DPbRXOGC0o3Rx9KeHXSJ2jCW3e0dZfFgCZTdsmnEly2vys9TxE:sIbVLboXZHiJ251dTdxGmnOyWo
Checks for missing Authenticode signature.
resource |
---|
056f7dccd4ca7b899f8b49092070ee7d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
My_ini
StartHook
StopHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE