Activate
DllCanUnloadNow
DllGetClassObject
HookProc
Logoff
Logon
Start
Static task
static1
Behavioral task
behavioral1
Sample
a7615c77d261a00b3ed9515e77e2f4c8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a7615c77d261a00b3ed9515e77e2f4c8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a7615c77d261a00b3ed9515e77e2f4c8_JaffaCakes118
Size
43KB
MD5
a7615c77d261a00b3ed9515e77e2f4c8
SHA1
150a2449ae1779032367614910a393320a516ccd
SHA256
2d5c7f11efc2371a0fc16bfaab5b90492b7dfed1fe3595780846d743d564f449
SHA512
e52363dfcfa86bc0f67be39af347c73171688273943aa54b8c1594c89729ad4da1efcd09d3f0d5a6e6bce766a73fb7c485d4e57350216cb26f38624d4a261889
SSDEEP
384:qer/eMmB0GPFkATL/KC8yWY0uy3yxPc3IDUP55MO9DQqieQLp6OrT5aKso:VrFY0GhL/KCEY6wc3nP55zixp6sTo3
Checks for missing Authenticode signature.
resource |
---|
a7615c77d261a00b3ed9515e77e2f4c8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Activate
DllCanUnloadNow
DllGetClassObject
HookProc
Logoff
Logon
Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE