COMResModuleInstance
MXHDPUC
Static task
static1
Behavioral task
behavioral1
Sample
2abd2694aa0ad5acf9c7c2c64b5f344d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2abd2694aa0ad5acf9c7c2c64b5f344d_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2abd2694aa0ad5acf9c7c2c64b5f344d_JaffaCakes118
Size
56KB
MD5
2abd2694aa0ad5acf9c7c2c64b5f344d
SHA1
91fb2d798f9eac6c8c0d6b68224b2bb6f15765f8
SHA256
3a7740213c7845522caf6d889c1ca93179ebeefb45706f36fa2fe2b2f15bb36c
SHA512
9e4f2c03cf79a2191ea2df3de0f3275a6f0a4f70cbf8a1cbae4ff1292ecb48e2eeac929e13f02cb6951002f4313af5b72ea690990b915a34720544f2e69afe55
SSDEEP
1536:oLAcMb8s2ppNmGyjvROjbFF/LXNY/hpeivDakkDp:oLvMb8sc3DQvRk/LXNY+4ulDp
Checks for missing Authenticode signature.
resource |
---|
2abd2694aa0ad5acf9c7c2c64b5f344d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteFileA
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
SetWindowsHookExA
MessageBoxA
StrStrA
GetFileTitleA
sprintf
COMResModuleInstance
MXHDPUC
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ