CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
f318fdd4df8e35599379ba095baf52c2_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f318fdd4df8e35599379ba095baf52c2_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f318fdd4df8e35599379ba095baf52c2_JaffaCakes118
Size
66KB
MD5
f318fdd4df8e35599379ba095baf52c2
SHA1
7bd98d7e6b722fb8a1438275cfb103d5f45529bd
SHA256
ed8f19efe279749a385656937f541f28b00deee36abd2c86384ddac30b764bf7
SHA512
cea40f193622ffd9dedc7e1f2fd42462aca5e8421cd1efd64b5e81d8e83133a36ea5ff1bc6d1be756e0670104de3421bf2310841cade26fb0b5bb09469602c95
SSDEEP
1536:PSwlKC19SnIhSmet8/MfKVyPnsVjpPQ733SnJQmszn9e/POns:HAMbEU0miA70n8P1
Checks for missing Authenticode signature.
resource |
---|
f318fdd4df8e35599379ba095baf52c2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_vsnprintf
connect
DeleteObject
UnhookWindowsHookEx
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE