CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
0aa6a08e58fa423d42a48aaf22418eb6_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0aa6a08e58fa423d42a48aaf22418eb6_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0aa6a08e58fa423d42a48aaf22418eb6_JaffaCakes118
Size
66KB
MD5
0aa6a08e58fa423d42a48aaf22418eb6
SHA1
fdabd946131b358a07ac04020ee9521eb51aa82e
SHA256
0289f9c5d013035afe8ca8c6b98c9aa1979714d0fa0824ce6e2365b6f4e5f093
SHA512
56016e25978f1cfc14a98aa9b7282f9ca388bb563f228746c8bcb1eb228177898390e227641b3e50cd21d5335fb6d7d8d13c394087c2caa21844cdac1b8b559c
SSDEEP
1536:Zwoq+LsVXP1n0KYs427G9JdU4zreXTNiJKiuF1c8yNEdczXIWR:ON+oVXRKJ2qzdzbJKf6UcEWR
Checks for missing Authenticode signature.
resource |
---|
0aa6a08e58fa423d42a48aaf22418eb6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_stricmp
GetWindow
DeleteDC
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE