Export1
Export2
Static task
static1
Behavioral task
behavioral1
Sample
61b055a731c0eeacfc0b4fa69f9bc74e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
61b055a731c0eeacfc0b4fa69f9bc74e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
61b055a731c0eeacfc0b4fa69f9bc74e_JaffaCakes118
Size
22KB
MD5
61b055a731c0eeacfc0b4fa69f9bc74e
SHA1
47839fed3bdf009d18c466daa8bc46b26c5dbdb8
SHA256
c8b03ea46acd91c021798ce4841fbb62ba2db9ca75331eb14879cf7f57daed0f
SHA512
403929d3cdd24d4434ede76a13fe65fcd5d25b1f025bdd02a62438df41ba1b06fb48661af11720b5e7a7cd2c290857ca60d718638ed7155d821808c8eb2a88cc
SSDEEP
384:dB4rDJvXHCK9E7U6Dxo0phLjAEqJpB8MKUvmxCuxU9YqCTQiCjNfsdO:IDBHCL7U6DxouwpJKym8ua9iTm8O
Checks for missing Authenticode signature.
resource |
---|
61b055a731c0eeacfc0b4fa69f9bc74e_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetLastError
Sleep
GetTickCount
lstrcmpiA
lstrlenA
CloseHandle
lstrcpyA
GlobalAlloc
GlobalFree
DeleteFileA
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
GetModuleHandleA
lstrcatA
CreateThread
DisableThreadLibraryCalls
Export1
Export2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ