DriverProc
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
a55c0686df3f0cc98ac68b322e822870_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a55c0686df3f0cc98ac68b322e822870_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a55c0686df3f0cc98ac68b322e822870_JaffaCakes118
Size
23KB
MD5
a55c0686df3f0cc98ac68b322e822870
SHA1
7fb00909b893cc2e0be42bf6fceeac804c7d6ffe
SHA256
66d6ae67a7cd0c5388e0b5087375bb9a9fce927dc5069576da8e0ce50ed98e41
SHA512
e525d6371b9ff9a7d53bff97ea1750b5e9513eaf3557308efd6c912d85c303b61681cd4f9bc2e0bcf906509ffb7a62620252d90c411fd54e0510e12e95ef2844
SSDEEP
384:vQ9JgwMGe/k3IQtE9kxdFa201lPErrSQFM/ou5KZ0WCFgfKPVgvKro9LC:Sre/k/ekxdk90rmQFMAu5KOWCFgfmK+
Checks for missing Authenticode signature.
resource |
---|
a55c0686df3f0cc98ac68b322e822870_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DriverProc
modMessage
modmCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE