CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
fc39d62b4a8516364b8d7f7d57a89264_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fc39d62b4a8516364b8d7f7d57a89264_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fc39d62b4a8516364b8d7f7d57a89264_JaffaCakes118
Size
61KB
MD5
fc39d62b4a8516364b8d7f7d57a89264
SHA1
1236519aaf6d1bb4ab5e164dfe73512fb59c86ab
SHA256
439c959521fdd1555cbbda0baea6cf989f17659dfaa391e31a2bf46fd25e2fb0
SHA512
53b4dfad5ff0bdffc072d32d8f9b5c173542b533fb051da2831f6cc90507701c51b8aaa380bb87191d04183e9ec15ff033c129e34d68250b573f1a7e35782ce9
SSDEEP
1536:Zwoq+LsVXP7hk3Qe0bDljfzVdNi+OaLgtmCwS3hJkmY:ON+oVXReKDljfZdNi+Oag2f
Checks for missing Authenticode signature.
resource |
---|
fc39d62b4a8516364b8d7f7d57a89264_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_stricmp
GetWindow
DeleteDC
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE