CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
0d6b03dee888a1b7d781715ccf31828d_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0d6b03dee888a1b7d781715ccf31828d_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
0d6b03dee888a1b7d781715ccf31828d_JaffaCakes118
Size
70KB
MD5
0d6b03dee888a1b7d781715ccf31828d
SHA1
3e70849096d6110af4f5cbfe71c0a5c4f19b7486
SHA256
861dfcd736fba66d550e1c72db1906c8e6d9e1e4d9326badcf315370964d76d5
SHA512
5fae2f9a9968adb398a3b8765b12abe65866177bbd80dbb2649f01666ba198b9ef7daea2953ebc621d0da299c8e407c84afac2ab05ee9119d12c93261014a1c2
SSDEEP
1536:meGhUZSZFbr124i/0Btr5QZLO+jJvgD4zJ/5:/YUWbw4Iutr1+jJvgD4VR
Checks for missing Authenticode signature.
resource |
---|
0d6b03dee888a1b7d781715ccf31828d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
memset
CreateDCA
wsprintfA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE