BabyWolf
ExtremeWolf
MonsterWolf
OutPut
WTProc
WolfLiteEntry
gtGodMode
Static task
static1
Behavioral task
behavioral1
Sample
34823da73fadee3b42296e0db68357f0_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
34823da73fadee3b42296e0db68357f0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
34823da73fadee3b42296e0db68357f0_JaffaCakes118
Size
457KB
MD5
34823da73fadee3b42296e0db68357f0
SHA1
3c420901260fbb306e910e3480635fa5728e4107
SHA256
60dec3309d9f58716943d838a85dab27662b1ae3646669713866b3b2502830fa
SHA512
a376a6866efccfd85b92920878572244adbdc1386ce8f4418f653b987bdf699fc8baf99b4532a69f2ffdb98537568b4cbac26304a962ba2e8976038520ebccd0
SSDEEP
6144:oMaXYjm/W4NS2Fhj2iRSIJMNf/i44nng2xZfAgo0V42oTDrxBLkV4ztlsHJdsUa:haojm+HSSIef4nQgpV2TDrxRkAtmpdK
Checks for missing Authenticode signature.
resource |
---|
34823da73fadee3b42296e0db68357f0_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
TerminateProcess
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
GetDlgItemInt
MessageBoxA
CreateFontA
BabyWolf
ExtremeWolf
MonsterWolf
OutPut
WTProc
WolfLiteEntry
gtGodMode
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ