CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
7585d37e06888d27bffde9725155348f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7585d37e06888d27bffde9725155348f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
7585d37e06888d27bffde9725155348f_JaffaCakes118
Size
81KB
MD5
7585d37e06888d27bffde9725155348f
SHA1
e4a9d9170da28232a681ced9f343ba535ec3675f
SHA256
df65d555e12b8cd5b3f3fa40056425f373016a98b747fb08f6b5fc1215ceae77
SHA512
b4e324b5cef63920d0b63f50ea4eae1351c6e8e62ea469ebe083ea555bd3850f284adf75aa38fe48cfb98e6d47c92d7da025723e95eb1d0f31d470f7c0124bd6
SSDEEP
1536:n2NNyGkHjkDzELuOtN12/+D76DCZYcjjHAZz1DktwM51gKx:nuAGWIz8KWDo4Dge
Checks for missing Authenticode signature.
resource |
---|
7585d37e06888d27bffde9725155348f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_vsnprintf
GetDeviceCaps
GetWindowRect
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE