My_ini
StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
40f9968c28524cf96c3047deb014fbfa_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
40f9968c28524cf96c3047deb014fbfa_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
40f9968c28524cf96c3047deb014fbfa_JaffaCakes118
Size
397KB
MD5
40f9968c28524cf96c3047deb014fbfa
SHA1
b09849c68c66d5d4c472764a8e82d1f4e9ccbb9c
SHA256
ce7c35e37c1821731840722c8e34a32f43b741aadfc42bdd8102ca132a6839f2
SHA512
c402e2e3285f4911ee96ac87b228612be8c88faae519f0cb9a131c09705bc9ed6149affff8c60335836f388776f89ed6a93292d7daf147f2dd9650cc17ef3a71
SSDEEP
6144:U9+jyg9VQXcVoFj6Wd1b+7DbWVeUPCW3e0dZfFgCZTdsmnElezyi8JAIn8ovVp+0:hzVQWodMXWht1dTdxGmnO/i81n82
Checks for missing Authenticode signature.
resource |
---|
40f9968c28524cf96c3047deb014fbfa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
My_ini
StartHook
StopHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE