?StartInject@@YAIPAUHWND__@@0@Z
?StopInject@@YAIPAUHWND__@@@Z
Static task
static1
Behavioral task
behavioral1
Sample
41f41e144bf0b44a16b91ec2dd82d31e_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
41f41e144bf0b44a16b91ec2dd82d31e_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
41f41e144bf0b44a16b91ec2dd82d31e_JaffaCakes118
Size
25KB
MD5
41f41e144bf0b44a16b91ec2dd82d31e
SHA1
727de19c2beecef20149eeb8e7b60c3e11ba5152
SHA256
709db9b1064bd84f34f934cfb5d3b71c036404c27f5145fcea406d3472faa629
SHA512
e22eb50cc0a1194c38126c08039710bb8d34915347bdf13747a15d73019083a2c7f8e6f653c067540b41ddf830b7884ceb9f23c70964f6e5441945e280f79905
SSDEEP
768:McQyfUEIzZsjPv2yKof+wY3ErROxNXLlhAe63:Mwf2ds7KofiErROxVLz16
Checks for missing Authenticode signature.
resource |
---|
41f41e144bf0b44a16b91ec2dd82d31e_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
RegisterWindowMessageA
?StartInject@@YAIPAUHWND__@@0@Z
?StopInject@@YAIPAUHWND__@@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE