DupaMac
TestHello
Static task
static1
Behavioral task
behavioral1
Sample
36a5cf08edfa6b789c5c11377d86660a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
36a5cf08edfa6b789c5c11377d86660a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
36a5cf08edfa6b789c5c11377d86660a_JaffaCakes118
Size
71KB
MD5
36a5cf08edfa6b789c5c11377d86660a
SHA1
2b453a38794eb0922866d6135db3d76638267ab4
SHA256
4611d5e5b653366085b806810b6c7a1e0240a4f64afe2cd45e998a806dfd8cde
SHA512
a34fbf153bbf59596d04c353d36adbd001c06287e8a5eaf09491aed268b429526a978c4f354068693697fb216c5e7bc8fd15e3a7849927bf6487a22ee8843a4f
SSDEEP
384:IF7el7e7eKFeyU6IwzFw8OPAu3GzwZ3YHjA1FtJ0R3b0SRxBlLIj+NLMspNN:IFsSTIwS88ANM3YHjA1Fz0hgSllXDN
Checks for missing Authenticode signature.
resource |
---|
36a5cf08edfa6b789c5c11377d86660a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MessageBoxA
InitCommonControls
LoadLibraryA
GetProcAddress
DupaMac
TestHello
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE