CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
3f72ec7aa0ee5089df821c9d1f396538_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3f72ec7aa0ee5089df821c9d1f396538_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3f72ec7aa0ee5089df821c9d1f396538_JaffaCakes118
Size
74KB
MD5
3f72ec7aa0ee5089df821c9d1f396538
SHA1
86486ce438e80d9fc20696a7015c005363edba3a
SHA256
441d3264686a74b1b524692376384e191b1cc5f0b0ab1cec742cdb77ce79ebfc
SHA512
26deae82846c3a33c8d2b566487847c9df0385dc76d948fba13d70a78e7bf023aaf0ec42e9cdfd6ef5c1ae9636d5b31549e81844d60195329c53d2d8e6cd65ec
SSDEEP
1536:3svIM3tv9aS1Y2xj2Ciwe6OVzlADTPX7uPkb3y1n+fGrT9mTtz2:3sv13tv9a6Vawe6AzlOTPqsbC1n+fUk0
Checks for missing Authenticode signature.
resource |
---|
3f72ec7aa0ee5089df821c9d1f396538_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_vsnprintf
DeleteObject
wsprintfA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE