CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
RealLogoff
RealLogon
Startup
Static task
static1
Behavioral task
behavioral1
Sample
950cfc2c088b09ee09e96232a2c885b8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
950cfc2c088b09ee09e96232a2c885b8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
950cfc2c088b09ee09e96232a2c885b8_JaffaCakes118
Size
291KB
MD5
950cfc2c088b09ee09e96232a2c885b8
SHA1
f903bb1d84801f67c3a9bd842e5296e6b9adb0e3
SHA256
a2f1f428b3dc4131021878982d92f956a037aab8ef35334070b86a6307d176fd
SHA512
25c8451f4fc40b42f91fdcd11545b8e5c14a02881a36dbdaf9a93a28e415f03b80140ad140349bbd22f4e4949dc9cf4482b8e30648f1b6e2c1a6e3f5b9863e3d
SSDEEP
6144:+jtJeHlPUjkBVi+QCIeWzKMW1299Vasw7Otihv2Dchzf7EoOW:+4cYBVQjzxW12LVaPwuvUazf7Ey
Checks for missing Authenticode signature.
resource |
---|
950cfc2c088b09ee09e96232a2c885b8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
RealLogoff
RealLogon
Startup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE