CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
85a4a9b09af4643b8d66294ba4d9182e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
85a4a9b09af4643b8d66294ba4d9182e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
85a4a9b09af4643b8d66294ba4d9182e_JaffaCakes118
Size
66KB
MD5
85a4a9b09af4643b8d66294ba4d9182e
SHA1
c49b4ab74f19e9ab202b9efd5fb84521304df02b
SHA256
67a00d5394b72ad0a8573e7a48de0d873c4c9c862c2f39d9e5c02ff6218ffc6d
SHA512
dd5ec30d0e99764c849d0343c07e2d1151218ea5069d65f3eefabe696234023db6b63d15edd2d96cef6fd464317165e7baf1d4ca48dd98204a530cd6705969df
SSDEEP
768:JpjQvBm5KRks8jrAdTMnno8YNyIsOtxgGSOGRpUrEOm7yPonFb5cuXFl0zGuRP4H:JpcvBq2h8vAKnuyIs2x+l0rEXXzXxGkx
Checks for missing Authenticode signature.
resource |
---|
85a4a9b09af4643b8d66294ba4d9182e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DeleteDC
srand
GetWindow
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE