CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
2cb387c7ceec75a6e64aaa42fe761573_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2cb387c7ceec75a6e64aaa42fe761573_JaffaCakes118.dll
Resource
win10v2004-20240708-en
Target
2cb387c7ceec75a6e64aaa42fe761573_JaffaCakes118
Size
62KB
MD5
2cb387c7ceec75a6e64aaa42fe761573
SHA1
074b4b6684ec28fc09101556a15418fc8d409652
SHA256
2caa806df1c0502d292bf989089d16709bea59bfcc2cd2ceb622174deda80355
SHA512
1abe732b5eecc6eb5fc645265ce45dc9d5802ae6ecf7d94cccb6626364d2747734854fdacaae535d36edf1c602710b745319564de8e0fee74835e2670c088dbb
SSDEEP
1536:ApcvBq2h8vA0tQkR+lsXJtsGnx855anVg12H3twmjoQ:Ap+hL7kR6qTpnx8La212XtwGV
Checks for missing Authenticode signature.
resource |
---|
2cb387c7ceec75a6e64aaa42fe761573_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DeleteDC
srand
GetWindow
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE