CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
853edd57f48431aa856e9a90cf7282a2_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
853edd57f48431aa856e9a90cf7282a2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
853edd57f48431aa856e9a90cf7282a2_JaffaCakes118
Size
68KB
MD5
853edd57f48431aa856e9a90cf7282a2
SHA1
7cabea3b16ae522e265a56767baf5050a3410bdb
SHA256
ff3399d0979f82aad9e21ef7e55f0dcac93de9a58be39fa6b6e870931d3cf3c2
SHA512
994e292334ab3242488091fe6816f265f08c02120a830256f29d5828b2ce533fba44a5ef891badcff9766880e4a0a720b5f54fe1df78427df5667348202a78ae
SSDEEP
1536:JpcvBq2h8vAj9rl2O5ikDAEQ/WCOAWcLJDM26U++RL52N6im:Jp+hLX2OhhQ/WCV1LJg++q52tm
Checks for missing Authenticode signature.
resource |
---|
853edd57f48431aa856e9a90cf7282a2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DeleteDC
srand
GetWindow
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE