DRM_GetPCRandomDLL
DRM_VerifyAuth_PCDLL
Static task
static1
Behavioral task
behavioral1
Sample
5ba2f7f1fe31868de5e7ebc5e3d421b5_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5ba2f7f1fe31868de5e7ebc5e3d421b5_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
5ba2f7f1fe31868de5e7ebc5e3d421b5_JaffaCakes118
Size
31KB
MD5
5ba2f7f1fe31868de5e7ebc5e3d421b5
SHA1
cc14cf16cfd470797aeaf719cb495807e6c42493
SHA256
62066143c62a7d49e43c69778b7d7709a54b2d01ab733c6796c692c70e117790
SHA512
0b79bef744a4d8a6fb4f47aa22021197a521048706e7238cff1864b3b12ddd8bc87437da03ada41a52a12997c38a13778ea248b6a6defa99c0842d9f785e4a59
SSDEEP
768:wiYdgYMpyWE0dcnAJl+tX30Idz3FJqzWxksTpQZ00mT9voUA7D:wbd5ZWE0WAJQ30Inrzu00mT9
Checks for missing Authenticode signature.
resource |
---|
5ba2f7f1fe31868de5e7ebc5e3d421b5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
DRM_GetPCRandomDLL
DRM_VerifyAuth_PCDLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE