GetPfxVersion
RegisterEmitter
RegisterParticle
Static task
static1
Behavioral task
behavioral1
Sample
14038aff54f7bbeff59db123763a0d4d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
14038aff54f7bbeff59db123763a0d4d_JaffaCakes118.dll
Resource
win10v2004-20240910-en
Target
14038aff54f7bbeff59db123763a0d4d_JaffaCakes118
Size
135KB
MD5
14038aff54f7bbeff59db123763a0d4d
SHA1
464d437e6fb5df64a9cd9113431361c5b4a4c340
SHA256
f5fa3b6ce19e58f64c9aa5c6326d7bde52162959c58c00e587868f536c460fd8
SHA512
46ed7bd2eead8e9f1d5bc85a793276e6e1f8f4aab454deffb4c154cc960f7be6ea323d6646029414a2423fc6eec9308c309bf2275f44834877a65fd9c71826ea
SSDEEP
3072:FHiX6zOa/kJ/TmX56PsHOuHFAO2syjNXXu+HEkGrRoNF37xozT:1iX2fkJshdHFA3seNn8kGrqNF4T
Checks for missing Authenticode signature.
resource |
---|
14038aff54f7bbeff59db123763a0d4d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetPfxVersion
RegisterEmitter
RegisterParticle
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE