Saul
SuppS
Static task
static1
Behavioral task
behavioral1
Sample
4581b624d5e057e9603ba6d06e96e612_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4581b624d5e057e9603ba6d06e96e612_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
4581b624d5e057e9603ba6d06e96e612_JaffaCakes118
Size
292KB
MD5
4581b624d5e057e9603ba6d06e96e612
SHA1
e7c890548949953de24976da75ef6303a46a3b89
SHA256
5a5c719e19863c0a3a16fb319fc3b57e56c1a2e2cc032ecbeb60292bed4f4c03
SHA512
0879ccc7a068920198e5dd416b6b66968b186a389b9cb9e72c2b8295853ee90aa35934c96d24800db660ea51443fe4fd4e9dd61d4f219880f461c6bf920623bf
SSDEEP
6144:vrGntAQsmr69gUC53DzCZIgn5QqpY3INBf:TGntzsQUC53DzCZIgg3gB
Checks for missing Authenticode signature.
resource |
---|
4581b624d5e057e9603ba6d06e96e612_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Saul
SuppS
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ