CandleInTheWind
GoodBeyYelouBrickRoad
Static task
static1
Behavioral task
behavioral1
Sample
24fec7f445d9cb61862c118b842c03ce_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
24fec7f445d9cb61862c118b842c03ce_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
24fec7f445d9cb61862c118b842c03ce_JaffaCakes118
Size
38KB
MD5
24fec7f445d9cb61862c118b842c03ce
SHA1
778e5cf10b8aab59193c551e22f6daea336c4aa7
SHA256
874394ba40404db3ef3a78e6cc6d2932c690409d78e7524f7b7843360c7c6d2e
SHA512
918b4a936c44c36dc45d535e70985c30b8852ac5f916acc22dc139f0986a8d3c421f83a22770042e583d864d34ed21cd712f0892697745b5d495571d869fdf06
SSDEEP
768:0jxdd+fFuJd48yhL91cXKrlxCB0qTZn1tWiGMtiWSA4lD:0jxdd+fF+yRhjrAT57FGkiW14B
Checks for missing Authenticode signature.
resource |
---|
24fec7f445d9cb61862c118b842c03ce_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SysFreeString
RegQueryValueExA
GetKeyboardType
URLDownloadToFileA
CandleInTheWind
GoodBeyYelouBrickRoad
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE