CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
3ae55f7cadea09ab60b79965b60671b4_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3ae55f7cadea09ab60b79965b60671b4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3ae55f7cadea09ab60b79965b60671b4_JaffaCakes118
Size
66KB
MD5
3ae55f7cadea09ab60b79965b60671b4
SHA1
47dbdd3d6a94996efa33cb035bb96a2e8ae40a22
SHA256
760fa2c364c6159952efa1b5911adf9d36f31d60180a190f1f405cdbfff514d9
SHA512
d8d6023a55752e4d6097eb3da9404d6669448a9950fe72645f773d2e7db7b2a31393ea3a49e2718e3184cf4c2c1a0b11e1c56acbc0fac2572e2f345c13898294
SSDEEP
1536:PSwlKC19SnIhSmetyjaIihiYrZIgfbln+hclpbPI6G+bwax9Hn:HAMl2X9JfpLI6G+sax9
Checks for missing Authenticode signature.
resource |
---|
3ae55f7cadea09ab60b79965b60671b4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_vsnprintf
connect
DeleteObject
UnhookWindowsHookEx
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE