CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
f4213214068871bfe5ea0acfa5054c92_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f4213214068871bfe5ea0acfa5054c92_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f4213214068871bfe5ea0acfa5054c92_JaffaCakes118
Size
60KB
MD5
f4213214068871bfe5ea0acfa5054c92
SHA1
e128943dc9c48196ac96cc47f4edf43c54466bba
SHA256
db0f497bef267ecdf0a4859ac1247a176e49c8ae343d970af40a95a0cd00014e
SHA512
d3e13456089fec40720b982146595514e3c7deaf297b0314ee6e16411695457637a0fb0eba6b8c74feba3856f1c64ccd9a4f63e0ae193eb444a10b72f95b41b4
SSDEEP
1536:Zwoq+LsVXPptQynCFjD0e+Z4hM7ElhxpRI/ph:ON+oVXgyCFjYJ4272hxDI
Checks for missing Authenticode signature.
resource |
---|
f4213214068871bfe5ea0acfa5054c92_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_stricmp
GetWindow
DeleteDC
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE