DoMyJob
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
acee2f51bb004e61da3f792e02d5e42a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
acee2f51bb004e61da3f792e02d5e42a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
acee2f51bb004e61da3f792e02d5e42a_JaffaCakes118
Size
17KB
MD5
acee2f51bb004e61da3f792e02d5e42a
SHA1
59c05727252439a4b6cf697c66f4205017593270
SHA256
d4e1a336d94240b282b1af357e6c359af2f6640af9b501fdc57e5940792b25e9
SHA512
a2afde051cc76c38783876907bb857353cab650757169382e1999e3168b1eec7daa80416e40f8e5808cec62831883d28a1f7ee4bbcf275c427ad6b917e27fe23
SSDEEP
384:Yc1fnvptHPVvUHbQ8Rwy9nG0xK0DxOrwyKJAeCgqYRPwvL:YOfH+k8RwinvxvUAJAYd
Checks for missing Authenticode signature.
resource |
---|
acee2f51bb004e61da3f792e02d5e42a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetKeyboardType
RegQueryValueExA
DoMyJob
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE