CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
894997591ca20f0d00a5a52f2ac2581f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
894997591ca20f0d00a5a52f2ac2581f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
894997591ca20f0d00a5a52f2ac2581f_JaffaCakes118
Size
19KB
MD5
894997591ca20f0d00a5a52f2ac2581f
SHA1
00ac4bff55f7a472caa1ab94a9cdf02a6c2d27e4
SHA256
8f910086e5bc52e2b2717189e494cd6c2efa798e21b68d01081448ba0a882e16
SHA512
46c7d1819d93b3cdc51528a232634a58ef4e1f3ae75fd5210542c01beb40b0c576f2cb927a6c455732f9791b527cfa3537e793541aa134103505d14878031fef
SSDEEP
384:GGI+xv7YR/5MlU0ZwsUput9CBeyN2arTAdECkOM+wmQrU7QXl:G2zYzMlUUfUjBey4E0L5VQ9Xl
Checks for missing Authenticode signature.
resource |
---|
894997591ca20f0d00a5a52f2ac2581f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
printf
GetWindow
DeleteDC
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE