WlxShutdownEvent
WlxStartupEvent
Static task
static1
Behavioral task
behavioral1
Sample
8e46821f55a562fc6e10e0789feb25c5_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8e46821f55a562fc6e10e0789feb25c5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8e46821f55a562fc6e10e0789feb25c5_JaffaCakes118
Size
116KB
MD5
8e46821f55a562fc6e10e0789feb25c5
SHA1
ecb79921296002ab29b635f3f6f244dfb8159a67
SHA256
e8b82eb45db4f81b8c9ca31fc71dd726c3397d69ad9bf264445386abe93cc60d
SHA512
2a363fd892b1efeb49a4a29c10c2947731b99317f29f1381f17b7a73c82f7cc1861e578cfb3dbcc2a7475c456c50596a5646832e7a36c9952d2f54a7f36cf6ae
SSDEEP
3072:XzKL6KVd3jq0KeWuhFbx/aFgNJJuVy0C:XeHd3W06wF0yQg
Checks for missing Authenticode signature.
resource |
---|
8e46821f55a562fc6e10e0789feb25c5_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
GetExitCodeThread
WaitForSingleObject
CreateThread
GetProcAddress
LoadLibraryA
WlxShutdownEvent
WlxStartupEvent
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ