StartHook
StopHook
Static task
static1
Behavioral task
behavioral1
Sample
45f080ca38b99d1eb43575f11173de59_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
45f080ca38b99d1eb43575f11173de59_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
45f080ca38b99d1eb43575f11173de59_JaffaCakes118
Size
33KB
MD5
45f080ca38b99d1eb43575f11173de59
SHA1
a4222d74443a422dc37ed813ebfee48abd615976
SHA256
d2ca3cc0ff1d2ea15ee2af7fdbf26054401e68c40e729f56fe3423ad400344ce
SHA512
c11ce8767f9b6896102c565987ee4fc511e7e85b980947f7916cbbc007736935cc0092c1b27a55b9a3b2ad2effc5ef4ee0eb332476094a460ee338fddfcdaf91
SSDEEP
384:eAHxUSUqujE8KnGQmitfCDwTdTXOXA9nficYDIxZ1/M8hX5AspxiPAzXxFoiWVV2:bKSUquI80GQZyonRZ+2iojoi3
Checks for missing Authenticode signature.
resource |
---|
45f080ca38b99d1eb43575f11173de59_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ