WinOffEX
WinStartEX
Static task
static1
Behavioral task
behavioral1
Sample
30d8457628554dab961a0b26162e960a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
30d8457628554dab961a0b26162e960a_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
30d8457628554dab961a0b26162e960a_JaffaCakes118
Size
338KB
MD5
30d8457628554dab961a0b26162e960a
SHA1
7b4644d93e4131c4384952ff63b18c6c62e7526c
SHA256
715d96f5f44ea30a7ee8794c67b409dd602cc6f7073e31f6ec3e7490cd84e1a9
SHA512
5edf27eaaf3b1162c9ef64884caf6cfb1dbe1a24679af42e49646d16029aafb40d9b15715c3fc7fda1b2e09c969b3c5d7ae1b12635c659ddac2c71859e355cf4
SSDEEP
6144:4QuF4g/nidQ3gxTzMS00X+7xX0Ztvr55b/igYnInxr3tuwv:xIjnYqgxTnA16vr55EIV3
Checks for missing Authenticode signature.
resource |
---|
30d8457628554dab961a0b26162e960a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
WinOffEX
WinStartEX
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ