DllCanUnloadNow
DllGetClassObject
InitSecurityInterfaceW
LsaApCallPackage
LsaApCallPackagePassthrough
LsaApCallPackageUntrusted
LsaApInitializePackage
LsaApLogonTerminated
LsaApLogonUser
LsaApLogonUserEx
SpInitialize
c
f
o
s
Static task
static1
Behavioral task
behavioral1
Sample
6f2647bb0a9829c524232a61400c608e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6f2647bb0a9829c524232a61400c608e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6f2647bb0a9829c524232a61400c608e_JaffaCakes118
Size
298KB
MD5
6f2647bb0a9829c524232a61400c608e
SHA1
ce3fa5f6282365ffd2f28ef4c10be28a7097542f
SHA256
f752c5ebdd2ae0b071135cd55738dc72d00bddbaee96d0ad65165a6398039a79
SHA512
682be3984b989f7abff4a83c9c2ea9815d787cac5f84516e3b2300dce1e6365eb537cbe67c1548e1bfd6d2502eb0c52a3377b9ea70fcf02b0a5b93ddd5b29a10
SSDEEP
6144:kVOFQnjnr2BP+5iEZR6o404ETr5bOw4NOZuvLgArtBEMDmY7:kVVjrdQ0oou2Ow+L6Y7
Checks for missing Authenticode signature.
resource |
---|
6f2647bb0a9829c524232a61400c608e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DispatchMessageA
DialogBoxParamA
DestroyIcon
DestroyCursor
DeleteMenu
DefDlgProcA
CreateIconFromResourceEx
CreateIcon
CopyRect
CharPrevA
GetTimeFormatA
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
WriteFile
VirtualFree
VirtualAlloc
TlsGetValue
SleepEx
CompareStringA
EnterCriticalSection
EnumResourceNamesA
FlushFileBuffers
GetCommandLineA
GetDateFormatA
GetStartupInfoA
GetVersion
LeaveCriticalSection
MapViewOfFile
OpenFile
ReadFile
RtlUnwind
Sleep
DllCanUnloadNow
DllGetClassObject
InitSecurityInterfaceW
LsaApCallPackage
LsaApCallPackagePassthrough
LsaApCallPackageUntrusted
LsaApInitializePackage
LsaApLogonTerminated
LsaApLogonUser
LsaApLogonUserEx
SpInitialize
c
f
o
s
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ