BabyWolf
ExtremeWolf
MonsterWolf
OutPut
WTProc
WolfLiteEntry
gtGodMode
Static task
static1
Behavioral task
behavioral1
Sample
adcf5ea0a725f4bb232a30b06192a345_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
adcf5ea0a725f4bb232a30b06192a345_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
adcf5ea0a725f4bb232a30b06192a345_JaffaCakes118
Size
455KB
MD5
adcf5ea0a725f4bb232a30b06192a345
SHA1
ffaeb3afa007279913848c757834692fc9b702c2
SHA256
34540b81a9c3815dba0ece59290a11a7ce5a41582b02a248d9e5dd1a7d296861
SHA512
c3ab7c70cd50b80decac16e243d5153d43b3e10304484bc5536315350d3ea5852e5d186e1f683b16194fa9fb8e7be291e790fcfd88137a0ad2fe57608c6c556d
SSDEEP
6144:jMa+Yjm/W4NS2Fhj2iRSIJMNf/i44nng2xZfAgo0V42oTDrxBLkV4ztlsHJdsU:gaVjm+HSSIef4nQgpV2TDrxRkAtmpd
Checks for missing Authenticode signature.
resource |
---|
adcf5ea0a725f4bb232a30b06192a345_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
TerminateProcess
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
GetDlgItemInt
MessageBoxA
CreateFontA
BabyWolf
ExtremeWolf
MonsterWolf
OutPut
WTProc
WolfLiteEntry
gtGodMode
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ