CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
08954a757afb4d3cca9a5e40977afcc2_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
08954a757afb4d3cca9a5e40977afcc2_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
08954a757afb4d3cca9a5e40977afcc2_JaffaCakes118
Size
67KB
MD5
08954a757afb4d3cca9a5e40977afcc2
SHA1
ca1a4656d783f95b01abd6e998c04489c4a6eb44
SHA256
413f57db0ac30bcf187864c6072856cbd86553dd822b8b42c361f7fe7c89b9c6
SHA512
622a6fb152c180733cad95bdd0b0f2c5bae19c57cce64bf3faebdc031249147451b2b633feb32f68076d94d660e7a04d75303608868bd1abced9244f399b2efe
SSDEEP
1536:T7MYloVC9UD1TSFWHM9V3VFzv8SlFNwHNBAmtHBvwRb:U44C9GpHC3VpJzwHYmBwRb
Checks for missing Authenticode signature.
resource |
---|
08954a757afb4d3cca9a5e40977afcc2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_vsnprintf
connect
DeleteObject
UnhookWindowsHookEx
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE