DllCanUnloadNow
DllGetClassObject
InitSecurityInterfaceW
LsaApCallPackage
LsaApCallPackagePassthrough
LsaApCallPackageUntrusted
LsaApInitializePackage
LsaApLogonTerminated
LsaApLogonUser
LsaApLogonUserEx
SpInitialize
c
f
o
s
Static task
static1
Behavioral task
behavioral1
Sample
731049bc5db1d79fbfc9b0ca551ffe5a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
731049bc5db1d79fbfc9b0ca551ffe5a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
731049bc5db1d79fbfc9b0ca551ffe5a_JaffaCakes118
Size
310KB
MD5
731049bc5db1d79fbfc9b0ca551ffe5a
SHA1
ac46898d7678d39a3f9a7578145b6e5d0143515d
SHA256
e223b6a61176effa571a820eb668c35f2d3931f6caad581a0e051ef614594f27
SHA512
96678e041cc69d5b0aff5653a8a90df47323483b62d5c552bd3f5e0c669608a30e234ccc7e052f0a5b6653ca585cb86fe4955307de9f5298bed9cfaa4a3a336c
SSDEEP
6144:2FR/51IELpk8Klbt0fgJmh2iNiKWuGKavgrAtzq:SMELpMlbt0f3V4nKqgrAc
Checks for missing Authenticode signature.
resource |
---|
731049bc5db1d79fbfc9b0ca551ffe5a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DrawStateA
DrawMenuBar
DrawIcon
DestroyWindow
DestroyIcon
DestroyCursor
CreatePopupMenu
CreateIcon
CreateDesktopW
CreateDesktopA
CharUpperA
CharPrevA
CharNextA
BeginPaint
ExitProcess
lstrlenA
lstrcmpiA
lstrcmpA
WriteFile
VirtualFree
VirtualAlloc
TlsAlloc
SetLastError
SetCurrentDirectoryA
LeaveCriticalSection
GetTimeFormatA
GetStartupInfoA
GetModuleHandleA
GetLocalTime
CloseHandle
CompareStringA
EnterCriticalSection
FreeResource
GetDateFormatA
DllCanUnloadNow
DllGetClassObject
InitSecurityInterfaceW
LsaApCallPackage
LsaApCallPackagePassthrough
LsaApCallPackageUntrusted
LsaApInitializePackage
LsaApLogonTerminated
LsaApLogonUser
LsaApLogonUserEx
SpInitialize
c
f
o
s
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ