EventLogon
EventStartup
Static task
static1
Behavioral task
behavioral1
Sample
ad40eff0d2dd06b59d1e2e9c31dfbc1f_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ad40eff0d2dd06b59d1e2e9c31dfbc1f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ad40eff0d2dd06b59d1e2e9c31dfbc1f_JaffaCakes118
Size
48KB
MD5
ad40eff0d2dd06b59d1e2e9c31dfbc1f
SHA1
e41ea5f52582c0d5a8b622d3900c3c6957d6f443
SHA256
345c56b36b0428a90df752b42f572a300bd697c1e44d7eb91d5ab22069e1043c
SHA512
8e18d0d29b6fe62cf7428b85bb2f25205fc61323712bc990e2f72156ac90e73690512f95c199cf9480bfd80c30dbd957e6f854389700b4bc290b1b9e7d2e2a38
SSDEEP
768:G1TxTPhW+xpj1nq3ZeWusEbW/EjA17h2Xjnc:sxTPhbxpRNXj6yo2Xjn
Checks for missing Authenticode signature.
resource |
---|
ad40eff0d2dd06b59d1e2e9c31dfbc1f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
CreateThread
GetProcAddress
GetModuleHandleA
VirtualProtect
GlobalFree
GetLastError
WriteFile
lstrlenA
SetFilePointer
CreateFileW
lstrcatA
GetWindowsDirectoryA
GlobalAlloc
lstrlenW
GetLocalTime
WideCharToMultiByte
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
wsprintfW
wsprintfA
EventLogon
EventStartup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ