EvtShutdown
EvtStartup
inst
run
tes
Static task
static1
Behavioral task
behavioral1
Sample
074f78c28d5264fde2b82aa01509204c_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
074f78c28d5264fde2b82aa01509204c_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
074f78c28d5264fde2b82aa01509204c_JaffaCakes118
Size
20KB
MD5
074f78c28d5264fde2b82aa01509204c
SHA1
9710f4f191a69a61c525f9a91cce50c8221a16ea
SHA256
420c77c44ae1d2778f5d8b2d8d70127ecd83806fc22c465877e835a67ecd93d2
SHA512
72524a82e8bcc13edf290bdef13dabee5abc3d2ad81b74fe416a44cfcba396a392a061e8a3c40e40c4e92d2cfe17353c9e1a116192914882e269b03188893cb3
SSDEEP
384:AamRJ3+cIIKBPaO7zhiYG3co7Iq4cUR0YTqR7khACP2D:qWzIKBHzhiVcpcRYuR4
Checks for missing Authenticode signature.
resource |
---|
074f78c28d5264fde2b82aa01509204c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SHGetValueA
RasEnumDevicesA
GetAdaptersInfo
GetThreadDesktop
CreateProcessAsUserA
EvtShutdown
EvtStartup
inst
run
tes
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE