InstallFun
LoadDllByRemoteThread
LoadDllBySetHook
RunFun
Static task
static1
Behavioral task
behavioral1
Sample
cf943cec97c963e490f57814f0eedb31_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf943cec97c963e490f57814f0eedb31_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
cf943cec97c963e490f57814f0eedb31_JaffaCakes118
Size
42KB
MD5
cf943cec97c963e490f57814f0eedb31
SHA1
03e6e751f585ee45ddca3607a64b1c5547ea1821
SHA256
c2fb2e34705652ab852f688ef94ae4e24c9ab8df0a62e2d24859e60020150dd7
SHA512
3c7e2da5e7470114db98712c5e94cd08408e46dbefc8d43bdf9d22c9f26446f3836899b26671e8fcc2a166ad819a78a2dc7df561b16f8fa3bd6f9b5a5496e07c
SSDEEP
768:r3zNc4zERcQOoxwa6h3eTSdRwpTm2QcW/uib6fbEmlodoJugblIKVqeQnPlKoTwK:r3zNHzER736h3iSdRwpaPcW/hbFmnJ7Q
Checks for missing Authenticode signature.
resource |
---|
cf943cec97c963e490f57814f0eedb31_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualProtect
InstallFun
LoadDllByRemoteThread
LoadDllBySetHook
RunFun
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE