CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
f4d2742138d06b1077965b3bbe7a6436_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f4d2742138d06b1077965b3bbe7a6436_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f4d2742138d06b1077965b3bbe7a6436_JaffaCakes118
Size
59KB
MD5
f4d2742138d06b1077965b3bbe7a6436
SHA1
29d0e310043f004994b41eece0f6c160345a9d10
SHA256
223f2048cc572333fe4c21e3930268d554e3453b2b857d1a96f4ec5c99a80d5b
SHA512
498893359fcfe00ad319898a9ced719708868e33c45c8ec23153714437a9fa023308623d30c1b2ce6b6b5378fc284db59c5004639fa0ac1206bab555095a2116
SSDEEP
1536:5SwlKC19SnIhSmCgtf3R11LaI99XDDTzFXqLmimgzWN:lAMP3X1LZpTRXZgzWN
Checks for missing Authenticode signature.
resource |
---|
f4d2742138d06b1077965b3bbe7a6436_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_vsnprintf
connect
DeleteObject
UnhookWindowsHookEx
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE