EvtShutdown
EvtStartup
inst
run
tes
Static task
static1
Behavioral task
behavioral1
Sample
07ab8340075496be8f1bc0a2f750b368_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
07ab8340075496be8f1bc0a2f750b368_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
07ab8340075496be8f1bc0a2f750b368_JaffaCakes118
Size
20KB
MD5
07ab8340075496be8f1bc0a2f750b368
SHA1
bdd945bf2bb4b88f0935b37976345adae7ab5064
SHA256
c17d5923d1971ed0d2857bb7dbe42b7e5bb2a597dada1a2987fb59c24d4f5ef9
SHA512
d259fdcdce4319e657f1737d62494c02ff571ac795aef35c74339e38adf8ab5b477978de1b885285842ac5c3d7502e9358b3bd3000050d521f137fb388830a96
SSDEEP
384:+ZQiBxHhxF+V3GdAo7IHj5xH7meX5mwPC:qQiBxHexj57mQg
Checks for missing Authenticode signature.
resource |
---|
07ab8340075496be8f1bc0a2f750b368_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SHGetValueA
RasEnumDevicesA
GetAdaptersInfo
GetThreadDesktop
CreateProcessAsUserA
EvtShutdown
EvtStartup
inst
run
tes
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE