Export1
Export2
Static task
static1
Behavioral task
behavioral1
Sample
1c66d62d2a3a6475084f1169d2ad153c_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1c66d62d2a3a6475084f1169d2ad153c_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1c66d62d2a3a6475084f1169d2ad153c_JaffaCakes118
Size
21KB
MD5
1c66d62d2a3a6475084f1169d2ad153c
SHA1
7c0281542349be0aacb1ec892f171831a3aa926a
SHA256
62a57a9b4befe1f72018d85790535b6a902b2ff6df2d3859d4ff09d031a5b78c
SHA512
7cffb0e06c2c807e8acbc2b7c98e1aa1c617ccff12bad5600168970679bdb1db5fe0849fcfd1d3d99b77b37f4497d50f55d418d22c7e1342c30e24d1a59ff4ce
SSDEEP
384:ZejXtwHjICLtxm/1HDbZw2sOImti+FkCTQVSIjoGb:w80CPOHRWM5THcX
Checks for missing Authenticode signature.
resource |
---|
1c66d62d2a3a6475084f1169d2ad153c_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetLastError
Sleep
GetTickCount
lstrcmpiA
lstrlenA
CloseHandle
lstrcpyA
GlobalAlloc
GlobalFree
DeleteFileA
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
GetModuleHandleA
lstrcatA
CreateThread
DisableThreadLibraryCalls
Export1
Export2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ