DestinationModule
DllMain
ModuleInitialize
ModuleTerminate
SourceModule
TypeModule
VirtualComputerModule
Static task
static1
Behavioral task
behavioral1
Sample
7e7951e85ed25171a4a938da13b715d9_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
7e7951e85ed25171a4a938da13b715d9_JaffaCakes118.dll
Resource
win10v2004-20240426-en
Target
7e7951e85ed25171a4a938da13b715d9_JaffaCakes118
Size
72KB
MD5
7e7951e85ed25171a4a938da13b715d9
SHA1
f638e2cd8f83d03d39f977e8a0a50c6b7976120c
SHA256
1bf112a8366f0670b0288280870de8bda8f446966096659d168f74150190897f
SHA512
a135a30ffeb982b9d05bd1b0531649555333c998b9808813ae9f1c72e3f714554173d6545e46c61569b1392db62ee0ffe0b662ac755787e323af83ec04fa05fb
SSDEEP
1536:g3cGjzbJ8NSG2+dOcOU80H6iF98tHOdnUhabuYVAhWvQlh:gsGjzbGBOcX80rKtHOla0wWvQ
Checks for missing Authenticode signature.
resource |
---|
7e7951e85ed25171a4a938da13b715d9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
atoi
wsprintfA
RegCloseKey
SHGetMalloc
CoInitialize
LogA
IsmSetCancel
UuidCreate
VerQueryValueA
SetupGetIntField
DestinationModule
DllMain
ModuleInitialize
ModuleTerminate
SourceModule
TypeModule
VirtualComputerModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE