?StartInject@@YAIPAUHWND__@@0@Z
?StopInject@@YAIPAUHWND__@@@Z
Static task
static1
Behavioral task
behavioral1
Sample
3b2774044d449ce5805dec925a1d90d4_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3b2774044d449ce5805dec925a1d90d4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3b2774044d449ce5805dec925a1d90d4_JaffaCakes118
Size
106KB
MD5
3b2774044d449ce5805dec925a1d90d4
SHA1
2ab45c7237e18bc346f262bfb1843d65a301e437
SHA256
98de267a8b50197012bc18aeb2452c526d30dfe9ba9e664c95782a3d7dbe80ce
SHA512
764ca1da962b4434884c8062e6ff20a55b90de4086a35c222ecad4f188ccfc0eabab8e184b4cbd85c497cc78bcc42baad0f6280b7ad223d92f559cd397102ff1
SSDEEP
3072:WW6vVZGqwfWj+7Opeku+9BY2H7TbkY+1ti6:WdvVQqwOm5+9a2HTkH1k6
Checks for missing Authenticode signature.
resource |
---|
3b2774044d449ce5805dec925a1d90d4_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
?StartInject@@YAIPAUHWND__@@0@Z
?StopInject@@YAIPAUHWND__@@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE