WlxShutdownEvent
WlxStartupEvent
t
Static task
static1
Behavioral task
behavioral1
Sample
b0da2525836ac121b2c3064be5be2bcc_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b0da2525836ac121b2c3064be5be2bcc_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b0da2525836ac121b2c3064be5be2bcc_JaffaCakes118
Size
96KB
MD5
b0da2525836ac121b2c3064be5be2bcc
SHA1
e7e218b41f11e4e2b41a545f9f45a523133c6ad8
SHA256
43a5ae52866fd7b873f0f23e2d7e0d47e2e80240d1ef1e2f643183c70f088ed3
SHA512
e118d41188da1fe753923b962e95159541e9b7be21cc9edd1ab2d62b07f051c394ead2f8922dbcc34964a19761ba92d9fc872fd7438804c14ae9231e943a5282
SSDEEP
1536:ZZItw/UPbwVDErl163o8d8FPouBYQYbVuwmP1PdqXCFVihB0A1bOQangQ:ZZ49l1h5drAulPLqXiUt1SQhQ
Checks for missing Authenticode signature.
resource |
---|
b0da2525836ac121b2c3064be5be2bcc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
WlxShutdownEvent
WlxStartupEvent
t
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ