CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
2f6d359f96ee1da49fcf66de87cfa976_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2f6d359f96ee1da49fcf66de87cfa976_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2f6d359f96ee1da49fcf66de87cfa976_JaffaCakes118
Size
70KB
MD5
2f6d359f96ee1da49fcf66de87cfa976
SHA1
39d29b09523deb3c52df6737b646edb75a63976d
SHA256
469a6fdcbd58d4a1188ce356ded880ac402f97dd0b61927295bbe4852709eeb1
SHA512
1674f624686c7532a5d795434c2e5207d86de76fdad2b389b9ff2fadf6dd18067b72b48df511f7842666b06313e3cd91f3e3f7031fc4dbb735918a8eac02af32
SSDEEP
1536:iFzN559FOFsgzTRWQf9Og8GujN+hDLvKz:gzP8suTQUujsOz
Checks for missing Authenticode signature.
resource |
---|
2f6d359f96ee1da49fcf66de87cfa976_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_strcmpi
GetAdaptersInfo
BitBlt
GetWindowRect
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE