HookOff
HookOn
PostURL
clickquyu
killdnfexe
writebat
writeurl
Static task
static1
Behavioral task
behavioral1
Sample
10d31a1d550ba9e25ad30a5b8017b81e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
10d31a1d550ba9e25ad30a5b8017b81e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
10d31a1d550ba9e25ad30a5b8017b81e_JaffaCakes118
Size
28KB
MD5
10d31a1d550ba9e25ad30a5b8017b81e
SHA1
0aa4e3182bd55c5a96344efdf80c5225d8ece711
SHA256
aa2536aa0db47d675ae5dadd6948cb5512f616b40aa5bbd3ea5bf803aad86801
SHA512
ff4742288d6242817e13074e259cd8820d1d961b13f37cc759cf1c7e6920ea3bcb678b4f6a6de13d7caa3e2d38f7ef8a2dffbc91abc31072c720ae8af4920c4c
SSDEEP
384:EEAHxUSSqujzEKnGQeokkVX0MxCtcQNROBVpEkKPov2kvYJM+w9mXBaAHKoM7wY:yKSSqu3E0GQIk50mCDs9JAJp8AqoMs
Checks for missing Authenticode signature.
resource |
---|
10d31a1d550ba9e25ad30a5b8017b81e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
HookOff
HookOn
PostURL
clickquyu
killdnfexe
writebat
writeurl
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ