WlxStartUp
exports
Static task
static1
Behavioral task
behavioral1
Sample
ffd59db87d25e98dc889d1c59f58e5b5_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ffd59db87d25e98dc889d1c59f58e5b5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ffd59db87d25e98dc889d1c59f58e5b5_JaffaCakes118
Size
108KB
MD5
ffd59db87d25e98dc889d1c59f58e5b5
SHA1
d8ff4b13901bf3bdbd7ab6e18ed06e43f8791e86
SHA256
8ee1e07009940b0b62a1ea9a2b650bfefbd0b1cda0ac86d81807b033c0be7118
SHA512
80b3487b9b2ba87169bf5a18955857388253cdc9e148d03f6f00a6fee4b9f57ccc8680ab676c2877cbf975fc84c316af50a52c440ffc30553c136cffdae01e98
SSDEEP
3072:/P6vEGhA1U/epP/6Jwdv7lag3Sblko9XxlvBGq:Hm/epPUwBlaKjKXjZP
Checks for missing Authenticode signature.
resource |
---|
ffd59db87d25e98dc889d1c59f58e5b5_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LocalFree
LocalAlloc
GetCommandLineA
DisableThreadLibraryCalls
MessageBoxA
DispatchMessageA
GetMessageA
CreateWindowExA
WlxStartUp
exports
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ