StartHook
okOff
okOn
Static task
static1
Behavioral task
behavioral1
Sample
426314dc835afc648315a61d199fd5e8_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
426314dc835afc648315a61d199fd5e8_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
426314dc835afc648315a61d199fd5e8_JaffaCakes118
Size
56KB
MD5
426314dc835afc648315a61d199fd5e8
SHA1
23861b7b7d1f55da78edfea3f025a62fac9774b1
SHA256
dedee958c3c858745ad526d231c87186bf09d49723df8348fe02d5a3970b87ec
SHA512
cfef27065ea1a0da8d7341bf3ee5a9b775d8ad2c335a66ae5e43362beb2fea30309621589b927309ad42a87ecb8224bf0bce5eb03c59a5eafd41aa80c08bf45a
SSDEEP
768:vMSjqcQaWlwlrdIcbsaVh09+dOgUFt7nLIpE3tbh5B6Xtr/tg3mBq8lRtK:jjqcQalQ2dsTLcmtDB+Jq8l7K
Checks for missing Authenticode signature.
resource |
---|
426314dc835afc648315a61d199fd5e8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
okOff
okOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ