WlxShutdownEvent
WlxStartupEvent
Static task
static1
Behavioral task
behavioral1
Sample
73904d7e77ab13220ddaa726d862f641_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
73904d7e77ab13220ddaa726d862f641_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
73904d7e77ab13220ddaa726d862f641_JaffaCakes118
Size
116KB
MD5
73904d7e77ab13220ddaa726d862f641
SHA1
db6fb52c890b1911868cb160439f237b06656d45
SHA256
bfc875816db258c7f3ada6d9fd00dacfb162a58dabef472876bf2c002a556f0c
SHA512
757163fc2cdb8344fdd3fd0c046e6d342f7cf33975c64df1582e9d2d5c460649334d5e2cb4810f36445564da10daf79ad8cb545304317d7d0257096a8818924a
SSDEEP
3072:WvgiZfHApxXaXCxCJYDRbCo2R0wPSheD9R:WvgEfHAjwUC+tC/0wPSsD
Checks for missing Authenticode signature.
resource |
---|
73904d7e77ab13220ddaa726d862f641_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
GetExitCodeThread
WaitForSingleObject
CreateThread
GetProcAddress
LoadLibraryA
WlxShutdownEvent
WlxStartupEvent
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ