X11
Load
Bough
Knob
Static task
static1
Behavioral task
behavioral1
Sample
119ac120ec2c9512a2ef181f8cf21d42_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
119ac120ec2c9512a2ef181f8cf21d42_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
119ac120ec2c9512a2ef181f8cf21d42_JaffaCakes118
Size
231KB
MD5
119ac120ec2c9512a2ef181f8cf21d42
SHA1
17699bc70c324e11b600575c06ab829d0c0d2054
SHA256
0c36195ccd58314ab5d3e157e365fefad1084480b4614b70f14d03e2113f3ae8
SHA512
478186217929af37c09c8e7b422cadeed9681a7683e07d80d5628377a983f71911a751ecad20fbbeec18ef2c5514c6a1d37e45cff5227bd0bf6c8b7367646b3e
SSDEEP
3072:cz2k3yiP7VC7Fft1mHCb/+KB8vcz0cgU0IZkFsdxUYyRzwpSYV:DkTTVC7vMiz0vlcgVjFs79yRzwp5V
Checks for missing Authenticode signature.
resource |
---|
119ac120ec2c9512a2ef181f8cf21d42_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
X11
Load
Bough
Knob
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ