EndTrackingContext
ResumeTracking
SetThreadCount
StartTrackingContext
StartTrackingContextWithRoot
StopTrackingAndCleanup
SuspendTracking
TrackerExportOne
WriteAllTLogs
WriteContextTLogs
Static task
static1
Behavioral task
behavioral1
Sample
98d2c3a9567355f929f30d1d2caaa52a_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
98d2c3a9567355f929f30d1d2caaa52a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
98d2c3a9567355f929f30d1d2caaa52a_JaffaCakes118
Size
68KB
MD5
98d2c3a9567355f929f30d1d2caaa52a
SHA1
6212f76345bc54d90fd9e628587487aa2edfa2b6
SHA256
2d403b606b9a9d215ce421951e951c97d450fdee8d7697eb4b80b27b3c7bce36
SHA512
bf7a80f3b9c05a58d22bed48e65811dadf124b39342161b846d3768e188dab9b4d9419a1f3db4a2d11d78966177ca21820412cc2c6c19f1b01045c26221f816d
SSDEEP
1536:DgAY7zgZ1nKcxGlfw5IDDlK1kZD/3hZjfM4kO8Dg8:DZezgZ0fw5IDDwkB3DM4ODg8
Checks for missing Authenticode signature.
resource |
---|
98d2c3a9567355f929f30d1d2caaa52a_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
EndTrackingContext
ResumeTracking
SetThreadCount
StartTrackingContext
StartTrackingContextWithRoot
StopTrackingAndCleanup
SuspendTracking
TrackerExportOne
WriteAllTLogs
WriteContextTLogs
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE