dllStartPlugin
dllStopPlugin
Static task
static1
Behavioral task
behavioral1
Sample
1c0e0744ba062a6790447277ddaa24ad_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1c0e0744ba062a6790447277ddaa24ad_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
1c0e0744ba062a6790447277ddaa24ad_JaffaCakes118
Size
157KB
MD5
1c0e0744ba062a6790447277ddaa24ad
SHA1
9131d98f10f75238405031cb07a3a67fb7c79629
SHA256
2e30cf63772ae5b39f3882fbda1090ab67c019c8aa412b4e4af34fe83ee610b4
SHA512
6d21d3cac2e8e8485907b898b5d152d2877c4eb6159b2fa3159554329fd9e2b5157990404917bc87cfb62240003877276c35bba2cbc213b20705b463e62d146a
SSDEEP
1536:Fspnu4yO4uhHIkraH67KiCf/pbTcCzODi/dTc67cBWW0GmkGFoRdTVOKfmLPj:ypnu4UkokmrTcCzOq4n7SKUb
Checks for missing Authenticode signature.
resource |
---|
1c0e0744ba062a6790447277ddaa24ad_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapFree
LoadLibraryA
WriteFile
GetTempFileNameA
GetTempPathA
CloseHandle
ReadFile
HeapAlloc
GetProcessHeap
GetFileSize
CreateFileA
dllStartPlugin
dllStopPlugin
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ