CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
8554558ffafe962663dc403a28806dc5_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8554558ffafe962663dc403a28806dc5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8554558ffafe962663dc403a28806dc5_JaffaCakes118
Size
75KB
MD5
8554558ffafe962663dc403a28806dc5
SHA1
f4c339d224a5c085c8e669a57e350847cd471937
SHA256
38992b068c4b9cd06c83dfea2f269527fc97e4c93b18692ed265c3702715a838
SHA512
0b73087b93183bd1b1ea3e4a7cc38f88d4bc7a8efd2940dd2f6c85850c3d6d8dae83bb72433a4367c7289de9b37efa8632005e7d45d788633bd2200709af33a8
SSDEEP
1536:JpcvBq2h8vABWQNYjMMFg6gLuNQXe2wEJRs068jJ8b1gURgxdBKZ:Jp+hLwon6kuNIe2wWRszqKBgURgxXKZ
Checks for missing Authenticode signature.
resource |
---|
8554558ffafe962663dc403a28806dc5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DeleteDC
srand
GetWindow
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE