CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
PealLogoff
RealLogon
Setup
Static task
static1
Behavioral task
behavioral1
Sample
85625fc2b19566ef45b657f0e7afdc75_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
85625fc2b19566ef45b657f0e7afdc75_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
85625fc2b19566ef45b657f0e7afdc75_JaffaCakes118
Size
276KB
MD5
85625fc2b19566ef45b657f0e7afdc75
SHA1
31f64442f947e54f3ea2cbe0ffe9f6950dcff082
SHA256
f7e2746c940842a838150da87a4e551e48423e8d8a693f9373e497a55048177b
SHA512
85468449b4c189592d3c10a82c223392c7e488bafaf818b9bb74fbdac80834b780493e6a6f89060d01ae9dae37ae17e3c369365b593ffe31b76417cf07a64a07
SSDEEP
6144:Lw7xFyLB4F6IiM4WeUkGo069QLVb8H9WlBy8i:aFjpiwe9GoX6b8dufi
Checks for missing Authenticode signature.
resource |
---|
85625fc2b19566ef45b657f0e7afdc75_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DispatchMessageA
DialogBoxParamA
DestroyCursor
CreateMenu
CreateIconFromResourceEx
CreateDialogParamA
CreateDialogIndirectParamA
CopyImage
CloseWindow
CharPrevA
CharNextA
ActivateKeyboardLayout
GetModuleHandleA
lstrcpynA
lstrcpyA
lstrcmpiA
VirtualFree
TlsSetValue
TlsGetValue
SetLastError
SetEndOfFile
RaiseException
OpenFileMappingA
OpenFile
LocalAlloc
EnterCriticalSection
EnumResourceLanguagesW
EnumResourceNamesA
ExitThread
FlushFileBuffers
GetCommandLineA
GetStartupInfoA
GetSystemTimeAsFileTime
GetTimeFormatA
GetVersion
LoadResource
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
PealLogoff
RealLogon
Setup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ