DllRegisterServer
DllUnregisterServer
GenerateDefaultEFSRecoveryPolicy
WLEventLock
WLEventLogoff
WLEventLogon
WLEventShutdown
WLEventStartScreenSaver
WLEventStartShell
WLEventStartup
WLEventStopScreenSaver
WLEventUnlock
Static task
static1
Behavioral task
behavioral1
Sample
858f13069adb8077e0767873050ac4bb_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
858f13069adb8077e0767873050ac4bb_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
858f13069adb8077e0767873050ac4bb_JaffaCakes118
Size
13KB
MD5
858f13069adb8077e0767873050ac4bb
SHA1
c040fd4758b3c6ace6e480517eef3abed3fba296
SHA256
5860ebe1f69de43b04fee1e7997c60b9704b3a0743d745e3dea1eb4e573b32ad
SHA512
003ed6e442e5a4205ef58feaa33375d7be9385f29c0226cc23e373ae6d17a67b35bcbb3ac58f75a4dd13cc3a8e6be64bb107535c6ecd620ce11cd5abb6cbbc48
SSDEEP
192:VbZ3gtrdBPDGfNqt6XvCcE9aOleaN9BGZhoNbrZOzajXMonZI/AedzYpkWVIqoCO:YYQEKJaIfN9moNpOWTmYpkWVIxCPW
Checks for missing Authenticode signature.
resource |
---|
858f13069adb8077e0767873050ac4bb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
RtlFreeSid
CopySid
wvsprintfW
CertOpenStore
UuidCreate
CoInitialize
DsRoleFreeMemory
ord208
DllRegisterServer
DllUnregisterServer
GenerateDefaultEFSRecoveryPolicy
WLEventLock
WLEventLogoff
WLEventLogon
WLEventShutdown
WLEventStartScreenSaver
WLEventStartShell
WLEventStartup
WLEventStopScreenSaver
WLEventUnlock
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE