Export1
Export2
Static task
static1
Behavioral task
behavioral1
Sample
0a2f4e326c4804bb80f8621ce2d7490e_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0a2f4e326c4804bb80f8621ce2d7490e_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0a2f4e326c4804bb80f8621ce2d7490e_JaffaCakes118
Size
22KB
MD5
0a2f4e326c4804bb80f8621ce2d7490e
SHA1
185467a5b8d931853229c416edb88d4c263010a5
SHA256
1d2f8a8900aa4b17561aa0e8ec0a97472dad6e21214deac621b6f377f29b2b52
SHA512
ad5b6480c48de942b9fb50cffaeb29e80d8725f223e3723b029abccdad231d022d436b9a40a469a69c6c35ae80f0c9ce305a93066c1f08d81a8df71139039867
SSDEEP
384:vGdWzyj1Hj75GMEqwD0mWoddhq1xoMfNDsCaacY8aC2jDgHWkCTQiTOlf95VfsX:edcClPMMtwD0mWUh8D9hcY8a3IHW3TgI
Checks for missing Authenticode signature.
resource |
---|
0a2f4e326c4804bb80f8621ce2d7490e_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetLastError
Sleep
GetTickCount
lstrcmpiA
lstrlenA
CloseHandle
lstrcpyA
GlobalAlloc
GlobalFree
DeleteFileA
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
GetModuleHandleA
lstrcatA
CreateThread
DisableThreadLibraryCalls
Export1
Export2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ