LoadProfile
ServiceMain
TestFunc
Static task
static1
Behavioral task
behavioral1
Sample
3646c8d560d1476e5a032349ab7a6697_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3646c8d560d1476e5a032349ab7a6697_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3646c8d560d1476e5a032349ab7a6697_JaffaCakes118
Size
30KB
MD5
3646c8d560d1476e5a032349ab7a6697
SHA1
0cc061659f559aad9543a38634cc1df177c21397
SHA256
10609942489d0f422a5dd50f22b07b88941319e29b1fd3b7b00f5ae119989bca
SHA512
6c403f09d37656a50cc4d3d2bb81d9dbcebf66b61cee77051b6ca08ac4d8024bb32d81b1ee364f62d0409b2f0e361b7f36397a70d048989420babcdb6e38cbce
SSDEEP
768:/OqiDR6u6lB7j7DPOw4OKk+67IH6Jh8V:RiDRVW/R2b6kH
Checks for missing Authenticode signature.
resource |
---|
3646c8d560d1476e5a032349ab7a6697_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
GetCurrentObject
_adjust_fdiv
LookupPrivilegeValueA
SetProcessWindowStation
InternetCloseHandle
TransmitFile
connect
ShellExecuteA
CreateStreamOnHGlobal
capGetDriverDescriptionA
StrRChrA
GetModuleFileNameExA
LoadProfile
ServiceMain
TestFunc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE