ExecNetFx
SchedNetFx
Static task
static1
Behavioral task
behavioral1
Sample
972c4c237ffb5fd4f3b30a4cf365f5ca_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
972c4c237ffb5fd4f3b30a4cf365f5ca_JaffaCakes118.dll
Resource
win10v2004-20240426-en
Target
972c4c237ffb5fd4f3b30a4cf365f5ca_JaffaCakes118
Size
38KB
MD5
972c4c237ffb5fd4f3b30a4cf365f5ca
SHA1
98ab7ffbda9f2ad25a1412a054bc61a1e8f2a8d7
SHA256
73651edb1904f6e91b4a46eca326c23ca08a7d1be631080433c6663b17499af8
SHA512
455f79704e75f47b3645a211558abb2772fa034a284609ce7e15da77a5b6fbe41e0e3ece64465197b201064f814c5c04871f0ed4da4a5064dbd35e6b476fd6df
SSDEEP
768:E9RDLOOHeIx8KjNh2DRsk8SlAzYpzkh6WcpzReRVkFzzx7mXHg9fo7Dx:0RLzci2DKk8SSzYBkh6hReR0D9a
Checks for missing Authenticode signature.
resource |
---|
972c4c237ffb5fd4f3b30a4cf365f5ca_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
ord171
RegCloseKey
ExecNetFx
SchedNetFx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE