ClientDllCleanup
ClientDllStartup
CreateProcessNotify
Static task
static1
Behavioral task
behavioral1
Sample
36509c4e4183413e5b2f68bb0549fd58_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
36509c4e4183413e5b2f68bb0549fd58_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
36509c4e4183413e5b2f68bb0549fd58_JaffaCakes118
Size
47KB
MD5
36509c4e4183413e5b2f68bb0549fd58
SHA1
522972b348d5e0f410f5edd5e036a2ec56293519
SHA256
e1a4062bea092ec43ba88988ac09c14d03ac47beb46601ef19781abdad9bc07a
SHA512
253fdcb4eb3efea0a8fb15d02909c50bfe83a9dec428801cca97ac53a0d2cf7c334ceabe70b3b1ea0412d9f91f6690d6184a594dac2a19478c45c0dc6acb156c
SSDEEP
768:UnLXKtYDZN5Xt5+Ht+Mhw1MU/jnrdQ3OU4I5uSUUwhEWmyGPOhI/1kV6DFcM+dPG:U+6Pg+Ia/jnr+3OdI5GmyGWhckOFz+du
Checks for missing Authenticode signature.
resource |
---|
36509c4e4183413e5b2f68bb0549fd58_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentThread
CreateNamedPipeA
ConnectNamedPipe
ReadFile
CreateFileA
SetFilePointer
OpenThread
InitializeCriticalSection
LeaveCriticalSection
SetThreadLocale
EnterCriticalSection
GetNamedPipeHandleStateA
SendMessageA
ShowWindow
DispatchMessageA
GetMessageA
DestroyWindow
RegisterClassA
CreateWindowExA
UpdateWindow
TranslateMessage
GetProcessAffinityMask
GetCurrentProcess
GetSystemInfo
GetCurrentProcessId
ExitProcess
CreateEventA
GetCurrentThread
SetThreadIdealProcessor
ClientDllCleanup
ClientDllStartup
CreateProcessNotify
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ