CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
716dff8df7f5922f416a9bcc5c320515_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
716dff8df7f5922f416a9bcc5c320515_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
716dff8df7f5922f416a9bcc5c320515_JaffaCakes118
Size
76KB
MD5
716dff8df7f5922f416a9bcc5c320515
SHA1
ca6655e95cf07a4e91c6e165eb3063862514cc91
SHA256
527e9ab8e14f6e661d2ae118b6d09499c30f6050a686824d66f3a2e20cf4e642
SHA512
f2d5a7361b229c4f034bcead883e61beb35a7b6bac3150f51f6cebde13e7dd059f6ddd7a6d9c6e68f48f74e4f2019e94ab4eecadb892c07ab00650c707c432c9
SSDEEP
1536:PSwlKC19SnIhSmetDlckwPr5S2ALAMieRDTdWN5jLUzzWBXntO:HAMiGdS2A15Pd++CXU
Checks for missing Authenticode signature.
resource |
---|
716dff8df7f5922f416a9bcc5c320515_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_vsnprintf
connect
DeleteObject
UnhookWindowsHookEx
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE