DllMain
RegisterProtocol
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
7abfa619a5851d4b80dc063ac9bc2348_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7abfa619a5851d4b80dc063ac9bc2348_JaffaCakes118.dll
Resource
win10v2004-20240426-en
Target
7abfa619a5851d4b80dc063ac9bc2348_JaffaCakes118
Size
31KB
MD5
7abfa619a5851d4b80dc063ac9bc2348
SHA1
bd6d9cf927eaa8b9dabb1b0211acfa1efe829768
SHA256
9159634603e5323090dadb465b19da5c1ca607893e2aef509ba9b84e3575763f
SHA512
02a33d2313425513be379208805f6897a9e4217d6f0e14ef7e62efe741f53cd5406d477b5bdadf6fa65c4f2a30d7a69258e5a96d94161af2f1c2a1d13c48690a
SSDEEP
768:2C2s7PN1BkWJsR3vMQhTaidycDGhSKO7Di:2Cjl1BKUYZycDG3T
Checks for missing Authenticode signature.
resource |
---|
7abfa619a5851d4b80dc063ac9bc2348_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
wcscat
RtmIsRoute
FwIsStarted
RegCloseKey
TracePrintfA
DllMain
RegisterProtocol
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE