XProc1
XProc2
XProc3
XProc4
XProc5
XProc6
XProc7
XProc8
XProc9
Static task
static1
Behavioral task
behavioral1
Sample
5444784fef1b3b218d104316637e0357_JaffaCakes118.dll
Resource
win7-20240903-en
Target
5444784fef1b3b218d104316637e0357_JaffaCakes118
Size
716KB
MD5
5444784fef1b3b218d104316637e0357
SHA1
5ab8cef1568de59229083145256edf5ceb092736
SHA256
7525a18db364143e05763f4a004b0b6d3e3125f87e78d98904668c46c6f34354
SHA512
4a8882e176b0562a315568e3b7213c4fdf05f6e2dfaddf9b87d01e6cf8ecf407f71a00706127733f7d03331d4673aed2d14ea2cffb5bd88f904192bc1e19fd57
SSDEEP
12288:PgZ/ezxXu7fHRh+CJ5DECYbmwOtIgSWfeoFlf71TJNJrUUMxbz3TbepKDU2FpTWk:Pg0zx+bDEC8kINWfeopVNlkzjbepKw2j
Checks for missing Authenticode signature.
resource |
---|
5444784fef1b3b218d104316637e0357_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpy
ExitProcess
DllGetClassObject
XProc1
XProc2
XProc3
XProc4
XProc5
XProc6
XProc7
XProc8
XProc9
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE