Buxom
F1122
Flies
Static task
static1
Behavioral task
behavioral1
Sample
57299640efcbc04b7e89fa38e8ebbdfd_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
57299640efcbc04b7e89fa38e8ebbdfd_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
57299640efcbc04b7e89fa38e8ebbdfd_JaffaCakes118
Size
272KB
MD5
57299640efcbc04b7e89fa38e8ebbdfd
SHA1
2af962d4f80d5a0e9f33f145cb63d23ebd51475b
SHA256
6a85fdbfd04c66bd8457644e66d44896603761ce31078e44c077ed134999d780
SHA512
4e81c8af7b7a5f6140ad2750ac5318f92bebdbe26b3024deac772e2bb53305d8f0d382dd192ffddbdd9220577b75f59b07e817a9aececc8d274058c617b86d5b
SSDEEP
6144:TWBJ3yG5oY9B0Cd1qjvff9Dtk+Cilr4IJ3rV6:CBoG5Dr0Q1qjf9Dtk6lnJR
Checks for missing Authenticode signature.
resource |
---|
57299640efcbc04b7e89fa38e8ebbdfd_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Buxom
F1122
Flies
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ