CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
PealLogoff
RealLogon
Setup
Static task
static1
Behavioral task
behavioral1
Sample
f180821e90f3cef68e8f201cf218c6a8_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f180821e90f3cef68e8f201cf218c6a8_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f180821e90f3cef68e8f201cf218c6a8_JaffaCakes118
Size
275KB
MD5
f180821e90f3cef68e8f201cf218c6a8
SHA1
44484e41475106c7b9de1c1dcf3be77d5f1f8475
SHA256
71a01489dbede8c81e1b8463d29ab75e097974d36b9c742a56ef2e5744c2f346
SHA512
12751e7a441b3268389d49a7b9ee2505cc3d662eddcaa3fbbc1947fd2730e5531e0067383c3cadea6cb3461f456ee4521c08b7ac5a33ebb027bb45b0b69d04b9
SSDEEP
6144:8cestavGryTqVL/Ri0WCQDBi7UPNlWMFdJMZPep5mbv:zUuLZURY70EMtXp5mz
Checks for missing Authenticode signature.
resource |
---|
f180821e90f3cef68e8f201cf218c6a8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateIconFromResourceEx
CreateDialogParamA
CreateCursor
CreateAcceleratorTableA
CharUpperA
EnableMenuItem
DestroyCursor
BeginPaint
SetEndOfFile
MapViewOfFile
GetVersionExA
EnumResourceLanguagesW
CloseHandle
TlsAlloc
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
PealLogoff
RealLogon
Setup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ