CreateHook
DeleteHook
Static task
static1
Behavioral task
behavioral1
Sample
0852198e11ae810cfc48d11ab441efc7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0852198e11ae810cfc48d11ab441efc7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0852198e11ae810cfc48d11ab441efc7_JaffaCakes118
Size
7KB
MD5
0852198e11ae810cfc48d11ab441efc7
SHA1
f6057c2a64415ee9045285270df9d5658e83f04e
SHA256
fbf6382d1a9de06f20b6bf90ad92e7b523473d0de8e6ea2f879f05f14962ee2b
SHA512
f2b2c295d308237a60803b37d895d44b772aae29cb16a915060dd6c2d43147c144f8c2b80cf3c6da884a5a4c68231b6ba71801d63e0d718f666d740b3daed84c
SSDEEP
96:nPI4WiJu8aFwiFtih01Rl532eJWahK4odImBx:ndW0u8/Jh0Dl532eJWao4g/
Checks for missing Authenticode signature.
resource |
---|
0852198e11ae810cfc48d11ab441efc7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
CreateHook
DeleteHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ