WlLogoffEvent
WlLogonEvent
WlPostShellEvent
WlStartShellEvent
WlStartupEvent
Static task
static1
Behavioral task
behavioral1
Sample
c2146ab24408ce53a1f3c0c49ac8fe0e_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c2146ab24408ce53a1f3c0c49ac8fe0e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c2146ab24408ce53a1f3c0c49ac8fe0e_JaffaCakes118
Size
37KB
MD5
c2146ab24408ce53a1f3c0c49ac8fe0e
SHA1
170b334f65278a69c7ff8e1f909a2db67c795504
SHA256
67adf31715627320b26b6d16d9f15c711aa79b57ca0365ac0401ecab93415fa2
SHA512
c862824b3c03e5665374644ebe5635b27a9ce68a9501761d9b364bb3aafdccf2225c6f2a72ff1f779da2bc5a363c017b70a019de1a54ad3a736c4d17cca99a81
SSDEEP
768:GI/sYkprGfaz3+Hek5oKKefWaC+E6Iy5a+I1FVXfmfsT:T/sYGr6ix+oOeaC+xR1yXfB
Checks for missing Authenticode signature.
resource |
---|
c2146ab24408ce53a1f3c0c49ac8fe0e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
WlLogoffEvent
WlLogonEvent
WlPostShellEvent
WlStartShellEvent
WlStartupEvent
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ