CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
81d14cee7801c8c70f4df5e2ff1f2fc6_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
81d14cee7801c8c70f4df5e2ff1f2fc6_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
81d14cee7801c8c70f4df5e2ff1f2fc6_JaffaCakes118
Size
19KB
MD5
81d14cee7801c8c70f4df5e2ff1f2fc6
SHA1
20a267f939f698c88bf2b3665de3d784a13e1c38
SHA256
cae253aa23e5be1a159c8721e7fd6307f78eb56233021198575a4213a877d8e7
SHA512
960b9dd543c38d322f5e400f481f72adba4c30380ec62085dd714e489669df2f9f529cb3eb59fa6120d70f48ce13d43b88eaa7839e150a4d941680599aca0204
SSDEEP
384:LYN3W+4SLt4yXQO8K2nT8v1qxSW2HLxUQ1f6fi6tvLb:EN3ewr8HnT8dqxSPHLRAVtLb
Checks for missing Authenticode signature.
resource |
---|
81d14cee7801c8c70f4df5e2ff1f2fc6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_vsnprintf
GetDeviceCaps
GetWindowRect
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE