?StartInject@@YAIPAUHWND__@@0@Z
?StopInject@@YAIPAUHWND__@@@Z
Static task
static1
Behavioral task
behavioral1
Sample
2ca88aedc8a5c335ca4de9d5700fa403_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2ca88aedc8a5c335ca4de9d5700fa403_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2ca88aedc8a5c335ca4de9d5700fa403_JaffaCakes118
Size
106KB
MD5
2ca88aedc8a5c335ca4de9d5700fa403
SHA1
646e58d717ba03b159e1769a3991af0a2c72cc6e
SHA256
7f145e677802e900744b4f4105c3f5c1fcc4e2648fa4be9c69f04e5b1dfc7a47
SHA512
1637b34823d5194e9b303f5dd550d258ad1f9176c3c605cae736c8d92d17bdf19e17d19efcf9054804e01c16ba272f8629abf3176d1f4432918d9181bb2e5bb2
SSDEEP
1536:dWYrS8UW1SRQ8/l7qDGXl6n7cHmDC1gry4MD15RfM0n4FSRRl4EAd57m7zXU8wEO:dNrSnu8IcWry4+GFSrl4vdY7rU/EO
Checks for missing Authenticode signature.
resource |
---|
2ca88aedc8a5c335ca4de9d5700fa403_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
?StartInject@@YAIPAUHWND__@@0@Z
?StopInject@@YAIPAUHWND__@@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE