CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
f4658668a2831daefdf0186b65a62a5a_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f4658668a2831daefdf0186b65a62a5a_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f4658668a2831daefdf0186b65a62a5a_JaffaCakes118
Size
70KB
MD5
f4658668a2831daefdf0186b65a62a5a
SHA1
9d470ddf9ed6462129ea5d5eea64d09deb0ec050
SHA256
0075bab1e058b01daa7559b5dfc13b0df423284676dcf4a8409969f20e37b3f3
SHA512
45119508ffcfe9251a09eb71b9fa72fc5caade60622c89a8250c596f9790e4377e3d253591d88d5fff8410db74ed9e4175b2e39275da786307bdce98e9803b43
SSDEEP
1536:MD7jQuJl5hfTBHHKca/6mW3Cv8Ozx+wh2QKZuXXZ:i1HHKjSmsu8qx+C2Q4uXXZ
Checks for missing Authenticode signature.
resource |
---|
f4658668a2831daefdf0186b65a62a5a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_vsnprintf
connect
DeleteObject
UnhookWindowsHookEx
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE