Load2Graphic
StartVideo
Static task
static1
Behavioral task
behavioral1
Sample
4bf13460b65695c6ba68528e537863d0_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4bf13460b65695c6ba68528e537863d0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4bf13460b65695c6ba68528e537863d0_JaffaCakes118
Size
21KB
MD5
4bf13460b65695c6ba68528e537863d0
SHA1
925bd17837699571a012f5dc083d549c5096d13a
SHA256
590be7e34ec6a2c66d538cac8de6a3b037089af1e094839a00669c73d791a388
SHA512
d0d07db7acf3da52711473286da94e878461e28ff8e0f77b9d6f10d7eb35b683aac65ff258f4afde7f40e8d259403df1b49e167ccf654dcdebfe63a38d6ea451
SSDEEP
384:NKs678JOPQO9G18joj2lqG4whIi5jyhc7FjM8v3n9Sp88Da14ITbR04wm0zUfRoP:NK1dJG2jo40whIS7LvX9Sp88Da19T10h
Checks for missing Authenticode signature.
resource |
---|
4bf13460b65695c6ba68528e537863d0_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetLastError
Sleep
lstrcmpiA
lstrlenA
CloseHandle
lstrcpyA
GlobalAlloc
GlobalFree
DeleteFileA
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
lstrcatA
CreateThread
Load2Graphic
StartVideo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ