WlxShutdownEvent
WlxStartupEvent
Static task
static1
Behavioral task
behavioral1
Sample
a01f79cc3c23d41626f88f86eaf26a72_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a01f79cc3c23d41626f88f86eaf26a72_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a01f79cc3c23d41626f88f86eaf26a72_JaffaCakes118
Size
116KB
MD5
a01f79cc3c23d41626f88f86eaf26a72
SHA1
f651ed4b47a32df1f9511b49ab7bd6748ab776c8
SHA256
b52269b08b38065ed02392eb00425a429df49dbcb9647d2058addfcfceef83ea
SHA512
4b3b88c0686997ca30824910c12ce06aed91d206812a9b1812e044f12abb676f0e9d6ef0f072f0038b68f423ad796454e4c251de4aa40c80fee1df94a85dcdc1
SSDEEP
3072:Udltq1b+WN0zSoQcEyphZjsA1z4wUh362jAhGF:UdltqMWN0TEyX11UhK2
Checks for missing Authenticode signature.
resource |
---|
a01f79cc3c23d41626f88f86eaf26a72_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
GetExitCodeThread
WaitForSingleObject
CreateThread
GetProcAddress
LoadLibraryA
WlxShutdownEvent
WlxStartupEvent
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ