VulanHookDll
VulanUnHookDll
Static task
static1
Behavioral task
behavioral1
Sample
020776e8a07f86e5904e4012a0e86332_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
020776e8a07f86e5904e4012a0e86332_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
020776e8a07f86e5904e4012a0e86332_JaffaCakes118
Size
73KB
MD5
020776e8a07f86e5904e4012a0e86332
SHA1
c3df6c802c1275be7696fcba62d4f4eeb7ef62f8
SHA256
ba5f41ef8aa3900cb6864315f8ecc5fa904e65a851886a393f3eaf96cde94fb2
SHA512
ab2633c0fe25ca71840ea854fbbf2c431d44127770942dad4b85958daf25d962abca16661f800be5f654c9d499890b97085b9662e3936888ee93b40f9872f805
SSDEEP
1536:zXeGSbnloywOJJtGmJkIoWJ+8/2HgREp5HO8Ne5pxtLx:C1jloywmGMkPWJ+8/2DvmP
Checks for missing Authenticode signature.
resource |
---|
020776e8a07f86e5904e4012a0e86332_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SendMessageTimeoutA
VulanHookDll
VulanUnHookDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE