WCEAddNTLMCredentials
WCEDelNTLMCredentials
WCEGetNTLMCredentials
_0212DBDHJKSAHD0183923kljmLKL
Static task
static1
Behavioral task
behavioral1
Sample
c17725e46d352a99a5245eb20a198741_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c17725e46d352a99a5245eb20a198741_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c17725e46d352a99a5245eb20a198741_JaffaCakes118
Size
120KB
MD5
c17725e46d352a99a5245eb20a198741
SHA1
14a8cdcabdbc82bb41c1accbaab7c86f7b661bb8
SHA256
03459156966bb220c2ef0ec98ab19661ed0064d9f5fbe542cd3e5dadbc42d41e
SHA512
df0b19f2aadede2d542056477992ee11806ca735ef87a4569c99e08e0b8a579277a7aaaea0eeebda548ffc367e0faa5c93dfbb0381677072b935b4b2db87fddd
SSDEEP
3072:FvZy/ykkqm4o/u6DRAEqtoBNGHFb5TvPXOe48R5Wy3:1ZiPhmjtUyBNGHF1D9xRB3
Checks for missing Authenticode signature.
resource |
---|
c17725e46d352a99a5245eb20a198741_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetModuleInformation
GetStartupInfoW
GetModuleHandleA
GetProcAddress
VirtualProtect
WCEAddNTLMCredentials
WCEDelNTLMCredentials
WCEGetNTLMCredentials
_0212DBDHJKSAHD0183923kljmLKL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ