mod_start
mod_stop
Static task
static1
Behavioral task
behavioral1
Sample
49f07196fdd2acc9b4c794d99ba1381c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
49f07196fdd2acc9b4c794d99ba1381c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
49f07196fdd2acc9b4c794d99ba1381c_JaffaCakes118
Size
61KB
MD5
49f07196fdd2acc9b4c794d99ba1381c
SHA1
933be36cb80d173be072db24ffdc4b1530dc94ec
SHA256
903b46624ec1001e5aed1b90fc625d1d817a1d531f5b1c8e66e9243eb031b1ec
SHA512
a67551ed4560a9b8c0dfb92d14a46c3fd8d8420a4a17b81cebddabb8afa8757080004044e97487ab5a7adbb09aafae0bd1b7314ade8baf4a4206a6e0f9468d97
SSDEEP
1536:4RrWBC+snkpmsTyoJkQgjmuX/PLew6BAUctekzeA:4YBC+skpzTyoJSmuXnLevmekze
Checks for missing Authenticode signature.
resource |
---|
49f07196fdd2acc9b4c794d99ba1381c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
htons
mod_start
mod_stop
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE