EvtShutdown
EvtStartup
StartMain
inst
run
Static task
static1
Behavioral task
behavioral1
Sample
37a4dfac2c94398b988710e97f5c8f3a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
37a4dfac2c94398b988710e97f5c8f3a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
37a4dfac2c94398b988710e97f5c8f3a_JaffaCakes118
Size
18KB
MD5
37a4dfac2c94398b988710e97f5c8f3a
SHA1
4557c2e569b4409142c2fbe7ab4ab693e4203242
SHA256
f1597e94d5745ce119a5f5c28f1b7d3c436b1a8115be6688401de3278e31eb19
SHA512
997f2df69712f8e4599dc3731c4402ea60bf2b7be9c27267680a2e5430d170473faf23f72cc8dc75334508efffce34c7a1138c227a7ed7338734293ae908e3f9
SSDEEP
384:Dg/FVFtlPDWKyhWi8GUOC7Yy8Y4/6uV87IBteTRLNIMDkGOi:obFtlPDWKsWi8GY2YPu1oVDbO
Checks for missing Authenticode signature.
resource |
---|
37a4dfac2c94398b988710e97f5c8f3a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SHGetValueA
RasEnumDevicesA
GetAdaptersInfo
PostMessageA
CreateProcessAsUserA
EvtShutdown
EvtStartup
StartMain
inst
run
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE