DllMain
WLEventStartShell
Static task
static1
Behavioral task
behavioral1
Sample
3002270ed0c11cc15d7b2b1c778d3533_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3002270ed0c11cc15d7b2b1c778d3533_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
3002270ed0c11cc15d7b2b1c778d3533_JaffaCakes118
Size
21KB
MD5
3002270ed0c11cc15d7b2b1c778d3533
SHA1
0f99366caa329166ccc8af5fede072cbc10fc62b
SHA256
2850bbf76c9777dfe197efb09ea580ff5a56305ba192f353097378dbf4e557e8
SHA512
84423a9e501b3f4d9ffe8f80fabb9c71723e9efd9d73affa362d1443e77c946b332849c7840bc810a6053eb9a93e4bed1f41c4286ef20d514005cb9092fd7cf4
SSDEEP
384:yf1HhUC0UCHnbkqnARrasVuCU8rUCHcaSdyoaJQhMT8brUBjbUCHnbkqnA4UCU8x:4HhH0HHnbkqnUjU8rHHnyaJQho8XebHH
Checks for missing Authenticode signature.
resource |
---|
3002270ed0c11cc15d7b2b1c778d3533_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseHandle
CreateProcessA
GetEnvironmentVariableA
GetThreadContext
ReadProcessMemory
ResumeThread
SetThreadContext
VirtualAllocEx
WriteProcessMemory
lstrcatA
lstrcpyA
DllMain
WLEventStartShell
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ