FW1CreateFactory
_FW1CreateFactory@8
Static task
static1
Behavioral task
behavioral1
Sample
76def2797af80a5694218583d75ae7cc_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
76def2797af80a5694218583d75ae7cc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
76def2797af80a5694218583d75ae7cc_JaffaCakes118
Size
153KB
MD5
76def2797af80a5694218583d75ae7cc
SHA1
6053dc8826546f73c3afdab6491da9af85c77112
SHA256
72ee8852dd6f4db798fd37086a684c8419e6f173df15b2cbcd11de4336328c10
SHA512
84c3cf0d6c91b7bbe306b152bac3051fbc956be169950db091036b17bc0885ae6b73e916b7f9c32832a5636127c1ac99e1dbaef8e7080c8c787bc10c73061a42
SSDEEP
3072:xb5opEuUDhaL+4VU74hk9DH7os/CUFkO/H/mdBi+NLwgPhm:xCquUK+446k9Hd/hF//Ii+2Sh
Checks for missing Authenticode signature.
resource |
---|
76def2797af80a5694218583d75ae7cc_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
FillRect
GetCurrentObject
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
??2@YAPAXI@Z
FW1CreateFactory
_FW1CreateFactory@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE