WlxShutdownEvent
WlxStartupEvent
Static task
static1
Behavioral task
behavioral1
Sample
fd614a835bce475dc05548d858080440_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fd614a835bce475dc05548d858080440_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fd614a835bce475dc05548d858080440_JaffaCakes118
Size
116KB
MD5
fd614a835bce475dc05548d858080440
SHA1
9c4cd8cee825d94ac985599e98a161e2f4ea77bd
SHA256
38274dce98b0704c2177d172310941b99f9f08150d491f66ec72a391356cb7a5
SHA512
68231674ee7e6ba2db4123526ade360ff4e3da21554525b8a59b6def433f57d60c067c9e9f8453bae3c47dfd281a3287a7774540e7a6b41d6767f0f6321d31da
SSDEEP
3072:Ufazd01nznNvWLz277tcdCqqd2eg+nT/5:sap0VNvhydnZeg2T/
Checks for missing Authenticode signature.
resource |
---|
fd614a835bce475dc05548d858080440_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
GetExitCodeThread
WaitForSingleObject
CreateThread
GetProcAddress
LoadLibraryA
WlxShutdownEvent
WlxStartupEvent
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ