?StartInject@@YAIPAUHWND__@@0@Z
?StopInject@@YAIPAUHWND__@@@Z
Static task
static1
Behavioral task
behavioral1
Sample
3b3ecf8f0ffedcdb2029751c7f248f19_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3b3ecf8f0ffedcdb2029751c7f248f19_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3b3ecf8f0ffedcdb2029751c7f248f19_JaffaCakes118
Size
106KB
MD5
3b3ecf8f0ffedcdb2029751c7f248f19
SHA1
516f3058ba46b39c3a11f5e4825f31c4c31fd0ee
SHA256
9ba90463fa66d68619cf90cd06553836455d837e82124e0e1936b17a7c4a94c9
SHA512
a3a865b02665911a2906ce339d5b12e2a5f98b6cfcd4c7a858788fdf122154953d99d05cf1b14464261ea9d056ac28b5123730200f1d41c73e0ba2783e8320a4
SSDEEP
1536:fU8bgBPWR6ubMkrlxrsy7d6hPgdBTBUfiWFfclrKvm/6SEWfb8wdMJJuuk/gMJl0:c88dWbgySxW1KfclevmgWfbZbfVJlh
Checks for missing Authenticode signature.
resource |
---|
3b3ecf8f0ffedcdb2029751c7f248f19_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
?StartInject@@YAIPAUHWND__@@0@Z
?StopInject@@YAIPAUHWND__@@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE