InstallServer
LoadDllByRemoteThread
LoadDllBySetHook
RunServer
Static task
static1
Behavioral task
behavioral1
Sample
3f060692ee243353ee191079a25ba214_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3f060692ee243353ee191079a25ba214_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3f060692ee243353ee191079a25ba214_JaffaCakes118
Size
42KB
MD5
3f060692ee243353ee191079a25ba214
SHA1
0441200670ed7239471b680d0743ce2181c7b289
SHA256
48fc3b204a89d76352c8f814fe3402e3fee2c803b133f53c5571ca2b4173e4df
SHA512
583817da360d820ca4dc6b096ff0286d9a2aae940c7cb4f7f12cccbdf85878a45cffe16f2bba8c761c0148693c4de7db90397842c1505aa3c30adf10b9d93257
SSDEEP
768:3Dcn3NU8sX7JfzT3gNSa+5CHhNs0Bp712aVCsVmrOC7CbNAUV5IfP:zw3NqfzTOSabBNs0L71V7QT0NAOG
Checks for missing Authenticode signature.
resource |
---|
3f060692ee243353ee191079a25ba214_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualProtect
InstallServer
LoadDllByRemoteThread
LoadDllBySetHook
RunServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE