ConnectionScheduleDialog
ConnectionScheduleDialogEx
DialinHoursDialog
DialinHoursDialogEx
DirSyncScheduleDialog
DirSyncScheduleDialogEx
LogonScheduleDialog
LogonScheduleDialogEx
ReplicationScheduleDialog
ReplicationScheduleDialogEx
Static task
static1
Behavioral task
behavioral1
Sample
b738dfc52db41f16f1d1c8f0cf123ba2_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
b738dfc52db41f16f1d1c8f0cf123ba2_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
b738dfc52db41f16f1d1c8f0cf123ba2_JaffaCakes118
Size
31KB
MD5
b738dfc52db41f16f1d1c8f0cf123ba2
SHA1
d0790b9ea02574d1daf9b1de73b16e5832664284
SHA256
bdda7754800dac7a3ac3aac3a52c3847b8b1341813afbb9d07e5a1fc1ebfce47
SHA512
8ce3f9a3fe88b2d8035a358689d2b32a791a80501fd2404271eb2e9d4e109d07412a43b92c5d006d407544c33657f73fa2af518c6f26c9ab0c27281d4458c4f2
SSDEEP
768:Vjk5+jCQ/AFK2DZkCvxileyvduITYF/8A37D8:VA55zK2DZTpn+AIT0Zs
Checks for missing Authenticode signature.
resource |
---|
b738dfc52db41f16f1d1c8f0cf123ba2_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
ord4621
free
GetDC
PatBlt
SysAllocString
CoDisconnectObject
ConnectionScheduleDialog
ConnectionScheduleDialogEx
DialinHoursDialog
DialinHoursDialogEx
DirSyncScheduleDialog
DirSyncScheduleDialogEx
LogonScheduleDialog
LogonScheduleDialogEx
ReplicationScheduleDialog
ReplicationScheduleDialogEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE