Create
Destroy
Version
Static task
static1
Behavioral task
behavioral1
Sample
c8b924eafd6be896bef1204a09b9b23c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c8b924eafd6be896bef1204a09b9b23c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c8b924eafd6be896bef1204a09b9b23c_JaffaCakes118
Size
41KB
MD5
c8b924eafd6be896bef1204a09b9b23c
SHA1
6dd110ef69704f1d48868d073824246b7bea9b3a
SHA256
72fa259065156cb6b77cf39af07b420664b56bd7d3563efd9fcfd25f00b8016c
SHA512
eed459179ad8edfd21a8efeb265f07598538698e6cf0b9788d7dd4174b77eb78df69f16b5de23f12d737a97771e3fc577bd7466e4406d6db8d99ba03fcbfb7bf
SSDEEP
768:ITVr/3pUkBcjb/qhbanF0Q8WN/yI9ZHvFkjRuHq/gQhWJFwEPH9pgtCwPkB:IQkBcjDVnR8WlyI9ZPFqRuHq/gQ08EPJ
Checks for missing Authenticode signature.
resource |
---|
c8b924eafd6be896bef1204a09b9b23c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
AddAtomA
CreateSemaphoreA
FindAtomA
GetAtomNameA
GetLastError
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
_write
__dllonexit
_errno
_iob
abort
fflush
fprintf
free
malloc
memset
strcmp
_EL_Xlen
_EL_Xran
_EL_free
_EL_malloc
Create
Destroy
Version
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ