CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
83cb55b7748480d58511737419f4a425_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
83cb55b7748480d58511737419f4a425_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
83cb55b7748480d58511737419f4a425_JaffaCakes118
Size
60KB
MD5
83cb55b7748480d58511737419f4a425
SHA1
6fa96bd49c3c7d8c06781cf7e27c08cbb73a280d
SHA256
13fdbd3ee135e00219164d42360bdf19cdfa4279c63c4542f9e432ff3f139ac9
SHA512
78e7226ab8fc6b678102d0f1b2ea4ec98eb734f2e58d893c0caab4bf926413cbfcec9401cda9d2627496fc7158934544ce9caf16b7f563f7409a0c304189add7
SSDEEP
1536:uvbRiV0uSAO2cZkJMyCc5SseuAyzjkXGViqzR1+b/hSHcIS:mqSAzMyXSsZFJViqK/z
Checks for missing Authenticode signature.
resource |
---|
83cb55b7748480d58511737419f4a425_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
??2@YAPAXI@Z
CreateDCA
wsprintfA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE