CreateHook
DeleteHook
Static task
static1
Behavioral task
behavioral1
Sample
11fce112c33256770ab3990d7edb9e58_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
11fce112c33256770ab3990d7edb9e58_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
11fce112c33256770ab3990d7edb9e58_JaffaCakes118
Size
276KB
MD5
11fce112c33256770ab3990d7edb9e58
SHA1
640574d021a06969d7b4a9fc831bbe9d0f567cc2
SHA256
e9544346202b87eb9233e55106abbe177c4cfca2cb3660318e96b1d042f87ece
SHA512
3ccb0d7ca9f2b13610f6163522810535e834f499d53697fff6df635113ab09539d7248681b67b82af4bcd522c98b7a466d59e1bf9efcb7135e588e62a65eb4e2
SSDEEP
6144:CEjYkkrF2rSh64gFz/Kskh1ymcwjkYOoujxj6sth:xjYk2KShNsrkzyo47oQN6G
Checks for missing Authenticode signature.
resource |
---|
11fce112c33256770ab3990d7edb9e58_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
CreateHook
DeleteHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE