InstallHook
ReleaseHook
Static task
static1
Behavioral task
behavioral1
Sample
572e1af85f6b58bcd2967b3416370ea9_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
572e1af85f6b58bcd2967b3416370ea9_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
572e1af85f6b58bcd2967b3416370ea9_JaffaCakes118
Size
504KB
MD5
572e1af85f6b58bcd2967b3416370ea9
SHA1
23626cd700085d99fd1976e224dd18407636da54
SHA256
71c25c4e2c1cc0acc8ad90c89615b27ec0743e1da16c8701905f0b5ffbae3342
SHA512
c1eadd920cf94f36ab7382ef76508040c6b6956d0ed9d8ca2baae390c51c59af8cc7e4448a496ae8b43809ec18dc51c5d2224cde30c47b628e8b7862008d4b4a
SSDEEP
3072:1+23yA+oqr8rbQeReUTJNKxfT/XwvOnUIBNNRJEtAK2DLyWC2Ie8RCTTTCYbQH2X:M23yZo5fdRdKxfbwSHDJEIM2tTTOH2Y
Checks for missing Authenticode signature.
resource |
---|
572e1af85f6b58bcd2967b3416370ea9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallHook
ReleaseHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ