CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
RealLogoff
RealLogon
Setup
Static task
static1
Behavioral task
behavioral1
Sample
20f0a209f963dfed0ca99b36810f9fea_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
20f0a209f963dfed0ca99b36810f9fea_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
20f0a209f963dfed0ca99b36810f9fea_JaffaCakes118
Size
260KB
MD5
20f0a209f963dfed0ca99b36810f9fea
SHA1
23ff617e746894a5f14458dac5c336ef0ec39e46
SHA256
6ebd4b7b498b2e1b99ac538f30b1e30c02243651c76520884dda67a3ed257386
SHA512
cc1ebfa4c3d6ab58a030af2087f640ba954e0b8a13d78b0ce038c5d5d99f85c71da4dfaeda94be92a94ad44a9291a4a8d6c50fab45406b76d11674905f7eb224
SSDEEP
6144:dcrPN8fpSjVkCtQK5iQMcG+COGbn0BsQIoyphRJTzeyzKf:d2F8fYjV5f++Cp0BsQtUJTz4
Checks for missing Authenticode signature.
resource |
---|
20f0a209f963dfed0ca99b36810f9fea_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
RealLogoff
RealLogon
Setup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE