DLLInjectedAdd
DLLRemove
Static task
static1
Behavioral task
behavioral1
Sample
3be4b56dbe844a6e34581097bf737fe7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3be4b56dbe844a6e34581097bf737fe7_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3be4b56dbe844a6e34581097bf737fe7_JaffaCakes118
Size
33KB
MD5
3be4b56dbe844a6e34581097bf737fe7
SHA1
1fd85ed6cffc183739dd230588003d7f6793efe3
SHA256
4709ac5ae4995fffd03061a68953d8316e4ce6c64bf993219e4a726e94a989a9
SHA512
6e60838e782d3a8e91ef88a5102ba90dbecf3f21bbf6121275ef852c4b85cd8668f1cc8a3c74938eafa761f3210307205f3035c2a79f149be098683c6a14e40e
SSDEEP
768:t+aoi6qZOpQB5ZpOc06HCMN9GT6RJ5BHUEy2YEZZEo:t+av6qZ4QxpP0AtNfRJ5BHxY
Checks for missing Authenticode signature.
resource |
---|
3be4b56dbe844a6e34581097bf737fe7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DLLInjectedAdd
DLLRemove
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ