starthook
stophook
Static task
static1
Behavioral task
behavioral1
Sample
3e59f0472bfee334f6ce4c7a634b3929_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e59f0472bfee334f6ce4c7a634b3929_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3e59f0472bfee334f6ce4c7a634b3929_JaffaCakes118
Size
52KB
MD5
3e59f0472bfee334f6ce4c7a634b3929
SHA1
a21851efbe2e076de39922c1003805b0b7a39cfb
SHA256
617922b8a97cbc84c36727cfe6315559434c39b1db282eb60891345c13f7fa7c
SHA512
282b66022028f7d42f8a05ca89d7eb265b262256b2eadebee7732723aeeede5cfd6dfb600119503a317d925f3fd8d70d72b3dcb23c316e41b5c9e3ea7f6fb130
SSDEEP
768:J3niLqeQcXbxwPwbhVwjIXstm3tDC9JTffZCpQOI0nkoZcpCzbj1HcX0r+tIdTCl:J3iLqeQEH8tmwr0WebBc1oTCzfx
Checks for missing Authenticode signature.
resource |
---|
3e59f0472bfee334f6ce4c7a634b3929_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
starthook
stophook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ