CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
03f51eae2bf83fd7ebab1ef545203407_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
03f51eae2bf83fd7ebab1ef545203407_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
03f51eae2bf83fd7ebab1ef545203407_JaffaCakes118
Size
63KB
MD5
03f51eae2bf83fd7ebab1ef545203407
SHA1
3d031f9509964356035a8f711c993bb17bdb8957
SHA256
c41cfbaa056cad8edb4945857000f95f217986691fbd8887c65a92b1b2093ec8
SHA512
4c3a5950e7de38c546ece7b2fe670b3f140d8b31ea6f51a00e2c6a13441c774028f2d8624311ceaddc489d7f9514779dc1c424d0f296cfcd56dc09e0e737de3e
SSDEEP
1536:tLUmv/PLVqF/WiSq36uSHaNqdtOZIMiSq36uSHaf:SmPLVqFePqqu4aNctOZIMPqqu4af
Checks for missing Authenticode signature.
resource |
---|
03f51eae2bf83fd7ebab1ef545203407_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
wvsprintfA
InternetCloseHandle
fseek
DeleteDC
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE