EvtShutdown
EvtStartup
inst
run
tes
Static task
static1
Behavioral task
behavioral1
Sample
860cc8065a2f627caa15a1e961a26b89_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
860cc8065a2f627caa15a1e961a26b89_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
860cc8065a2f627caa15a1e961a26b89_JaffaCakes118
Size
24KB
MD5
860cc8065a2f627caa15a1e961a26b89
SHA1
8c6843d3e0667ed6f298bb42f3c7205426fef90c
SHA256
1cc179fd4ff83e097b9aa0e9f42d244e6346d6f9592d50af8979c220bd0d6308
SHA512
991e9785f2f88a5f1da66be3f29bb069dc8d9d2e417185da1448a42c319d10e9c68296e776b9b5cb554949e3f91eb1af79b15b58e8a76df54cd397ef515a88ca
SSDEEP
384:7/taYHka2HvSpdLuDAqgqihMB3tbhEShYQh0VNl1IJHBROgCw42myaQ25zWPx:7QYEa2HvaducqbihM3aS2Q+Nl14LA2ub
Checks for missing Authenticode signature.
resource |
---|
860cc8065a2f627caa15a1e961a26b89_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SHGetValueA
RasEnumDevicesA
GetAdaptersInfo
CloseDesktop
CreateProcessAsUserA
EvtShutdown
EvtStartup
inst
run
tes
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE