WLEventLogoff
WLEventLogon
Static task
static1
Behavioral task
behavioral1
Sample
f42f8aee48602badf03c092a50f9e207_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f42f8aee48602badf03c092a50f9e207_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f42f8aee48602badf03c092a50f9e207_JaffaCakes118
Size
9KB
MD5
f42f8aee48602badf03c092a50f9e207
SHA1
d5f86dbfe260effc640aed7def7cc63e4ff01e2a
SHA256
ec85a8d405a15ebd5acf66ff7b74ee0417baa3ff3f4e96df72faa0bdc44d7d32
SHA512
6a69ddf36f1f01e0ea782d99185fdfc510332ee593bc8f2d7f33e409509620bf7c936782f380a8394dadf538bdcadcf4ad86b337206b2c9ab32da638e375b2e9
SSDEEP
192:AaXBOJC1bhKO2hQuFNotYwsenps3I+9Zi+3oJy7sK:AaXCO2GuFNuQZiru
Checks for missing Authenticode signature.
resource |
---|
f42f8aee48602badf03c092a50f9e207_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WLEventLogoff
WLEventLogon
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE