CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
RealLogoff
RealLogon
Startup
Static task
static1
Behavioral task
behavioral1
Sample
35f678b71d8d06474371003536ae4440_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
35f678b71d8d06474371003536ae4440_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
35f678b71d8d06474371003536ae4440_JaffaCakes118
Size
291KB
MD5
35f678b71d8d06474371003536ae4440
SHA1
997ed9a10e49bdf066e51d588d846823d98aa266
SHA256
1aab2628b17c8e2be0493e45b8ef50bdf2f3c0e16829e18ce80b82d6b8a065ef
SHA512
29470f3173c12f6b686e05152d41943da606f54a97bbd073bd5957a301736b4f53c4454c294e0b3bc79f2648f3e432d8a41f9f6624215790523be246492f8582
SSDEEP
6144:DtZDvhQsmVOqrTUHc8Ex7harPyEzVKtggyhCu9/psySLWQ:JZDvhXmgITw5S7UWEzVbN2
Checks for missing Authenticode signature.
resource |
---|
35f678b71d8d06474371003536ae4440_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
RealLogoff
RealLogon
Startup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE