CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
69537be596533f97546b77ece21969e6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
69537be596533f97546b77ece21969e6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
69537be596533f97546b77ece21969e6_JaffaCakes118
Size
64KB
MD5
69537be596533f97546b77ece21969e6
SHA1
98a5715b910dec438c13398b1d7869904a40424e
SHA256
2251e8fcb783c9cec4592ed587d26b57f960cb08d657cf2b888e91b8fc5b66f2
SHA512
9db1f1a9b77b36b1c08ec35c57784a0ed58081cefe0729221c2b3dcc41c10b2c3a4973d0cae568dcb65009bdcae352cc3b4e8a65a2cc109cdeea9546b7d837a0
SSDEEP
1536:meGhUZSUfuS9Y5NCxphZbZYpprmifiuwRJhqY868jZ:/YUDfL9Y5YzSpXhMS168jZ
Checks for missing Authenticode signature.
resource |
---|
69537be596533f97546b77ece21969e6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
memset
CreateDCA
wsprintfA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE