dllStartPlugin
dllStopPlugin
Static task
static1
Behavioral task
behavioral1
Sample
46e5d304e67a389ff66e7becc99b0d9c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
46e5d304e67a389ff66e7becc99b0d9c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
46e5d304e67a389ff66e7becc99b0d9c_JaffaCakes118
Size
98KB
MD5
46e5d304e67a389ff66e7becc99b0d9c
SHA1
ae12f7bbc6a249f0b8507c701db2ea1a37b3670c
SHA256
434dc3af505174da7374450734c354c5450e78dde259ca8294bb953bf8816316
SHA512
f6358d6a71181682c199c96489e6639b787102013bc1ce47abd496309536f1875285476393b58c408dbc2f196f0530fa18067be1518932d1e58db1d2cb277fc5
SSDEEP
1536:dBXkdZY9TiTvO+x0ZcYf80iKVnhl+MMbuFfDOrBWqf:LkPck5KV1FL+Bx
Checks for missing Authenticode signature.
resource |
---|
46e5d304e67a389ff66e7becc99b0d9c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapFree
LoadLibraryA
WriteFile
GetTempFileNameA
GetTempPathA
CloseHandle
ReadFile
HeapAlloc
GetProcessHeap
GetFileSize
CreateFileA
dllStartPlugin
dllStopPlugin
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ