CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
649c534ef7897872f9d2e8abb126145c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
649c534ef7897872f9d2e8abb126145c_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
649c534ef7897872f9d2e8abb126145c_JaffaCakes118
Size
68KB
MD5
649c534ef7897872f9d2e8abb126145c
SHA1
b82a808739cebf56ffe0f48293257f1b9abd7fd8
SHA256
2168239de8bb70ff4b136dd071428551396004305c46dc35d9d9fb0fa9cc6830
SHA512
e10d49fd88b01233e0934c770a8ea9bf93aa43a585ed9e64c039363f389c5aceb9e6604b8e51a34f16de1d0dda6e35f13646c7648a571f1add7fc47a6b2ac321
SSDEEP
1536:iFzN559FOPCSMtuFYP6Zeok3+x50Ha2ICn1q/M0a:gzPQCSMtuxZeoib62IA1F
Checks for missing Authenticode signature.
resource |
---|
649c534ef7897872f9d2e8abb126145c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_strcmpi
GetAdaptersInfo
BitBlt
GetWindowRect
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE