WlxShutdownEvent
WlxStartupEvent
Static task
static1
Behavioral task
behavioral1
Sample
25eb7640724c22a803faa5dd5e643bd3_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
25eb7640724c22a803faa5dd5e643bd3_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
25eb7640724c22a803faa5dd5e643bd3_JaffaCakes118
Size
116KB
MD5
25eb7640724c22a803faa5dd5e643bd3
SHA1
1f5a83dec83e516b01a428baa06d0d3c3fdaf6da
SHA256
bb25794390a1680a38f3a587b1ecfd007ce687adec9984f70a00e6d3d8ce8e93
SHA512
8c83f7f430e870e28be7cc9903ce216992cd6726cd14eb56939e39e4cdf39c89a5e6d71bbe36b57eac5d82f66d0fe7a66fce5c58e4385300bdd7bac4865a3658
SSDEEP
1536:wRPhm5ninUligVrk9HI0yft+MATnMTdZphkBHmvEjeX8uyBLTsERElKZL7Q7+9:YhqniO5VQHIJ+NTnYZpOblXRn4+9
Checks for missing Authenticode signature.
resource |
---|
25eb7640724c22a803faa5dd5e643bd3_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
GetExitCodeThread
WaitForSingleObject
CreateThread
GetProcAddress
LoadLibraryA
WlxShutdownEvent
WlxStartupEvent
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ