CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
RealLogoff
RealLogon
Setup
Static task
static1
Behavioral task
behavioral1
Sample
00976a835645a3a53fdf059f8066faf6_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
00976a835645a3a53fdf059f8066faf6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
00976a835645a3a53fdf059f8066faf6_JaffaCakes118
Size
257KB
MD5
00976a835645a3a53fdf059f8066faf6
SHA1
f7837edb628ba4e5a021f1648a3e1bf2ab0bead5
SHA256
f4da69d77e5096533626d68033c2da1e2fc2ba39188379b659725ca26bef4e06
SHA512
eb7add0823cefa88de693044f5b92b3ab180aac3ab2abf989b1e542c0f81962591b0c287c89d13b2665897455408f6df89790ffb0ae6dfac36f07b7ed17ed7c9
SSDEEP
6144:jgdDYWt1ws9ZG07e4Lc10dmi7TZyo30h1rjBDlmmky35UQLs:jgZhXwYf7eT10dmi7Ta1BJBky3KQg
Checks for missing Authenticode signature.
resource |
---|
00976a835645a3a53fdf059f8066faf6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SHGetFolderPathA
gethostbyaddr
CharLowerA
RegSetValueExA
CoUnmarshalInterface
GetErrorInfo
PathFileExistsA
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
RealLogoff
RealLogon
Setup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE