CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
6f6f5763908ff366d2e7366f4b6c73d5_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6f6f5763908ff366d2e7366f4b6c73d5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6f6f5763908ff366d2e7366f4b6c73d5_JaffaCakes118
Size
51KB
MD5
6f6f5763908ff366d2e7366f4b6c73d5
SHA1
3b40668fba851cc67d44e7dace735d79962c4c41
SHA256
6d23d31a487179cb6f186143ee41aebb6218a902458a619ab9e17f4110b86ec7
SHA512
6bb6341b640cee460da87fed3396ac756bdb029de81f22c41cbcf01e721220617137fb0c2be192b3c984956ce452d60c62133482842f771b9b553f74be7c5cfd
SSDEEP
1536:uvbRiV0uSAO23MCFviz31T8WsMZ/te5PaD7B:mqSA2UvC1Tw4e5yHB
Checks for missing Authenticode signature.
resource |
---|
6f6f5763908ff366d2e7366f4b6c73d5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
??2@YAPAXI@Z
CreateDCA
wsprintfA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE