CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
PealLogoff
RealLogon
Setup
Static task
static1
Behavioral task
behavioral1
Sample
e9be955b1a124a72050b69c228d89793_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9be955b1a124a72050b69c228d89793_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e9be955b1a124a72050b69c228d89793_JaffaCakes118
Size
275KB
MD5
e9be955b1a124a72050b69c228d89793
SHA1
0d3d70ca0f7289740e147b5eb4d3dae05d08dee6
SHA256
16ce4e5bc212c641cc8ad4cf272eb97f76180e73c1686f660291ea0059bbbf63
SHA512
ffbf98e852bfdb26ce8509dcad2e0d07e0cd9a580eadd8b37449cab4563666779d952ad1108f8e012768cb53b331be5039d8765fc499ab47c9281aca2c60727b
SSDEEP
6144:xcestavGryTqVL/Ri0WCQDBi7UPNlWMFdJMZPep5mbK:SUuLZURY70EMtXp5me
Checks for missing Authenticode signature.
resource |
---|
e9be955b1a124a72050b69c228d89793_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateIconFromResourceEx
CreateDialogParamA
CreateCursor
CreateAcceleratorTableA
CharUpperA
EnableMenuItem
DestroyCursor
BeginPaint
SetEndOfFile
MapViewOfFile
GetVersionExA
EnumResourceLanguagesW
CloseHandle
TlsAlloc
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
PealLogoff
RealLogon
Setup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ