CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
adaac03d991e63b31b17b65a180f821b_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
adaac03d991e63b31b17b65a180f821b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
adaac03d991e63b31b17b65a180f821b_JaffaCakes118
Size
52KB
MD5
adaac03d991e63b31b17b65a180f821b
SHA1
7de2b409984e11956a83b1fe9f9d561b2ce948ad
SHA256
3ccd3b65cd7df92bd50247d6bd1b52d528a1c353018d1f01f5f853af078e33fd
SHA512
ae58b020581346fb954d7779404a1811def2cff0e2e0ea621b87ccac94f3afee4f54eb843f16e4b0026c6e933e2dcf05487ddc463cd25f0a5683eabbd51ed83f
SSDEEP
768:ZLrBvXsGRxEUhGV0c7SxaO2HFt/J6IDDju6ij9HNeb+P+OERsB+NirgFWbORegmz:vvbRiV0uSAO2lt8IDD6j9HNhrIHuOs
Checks for missing Authenticode signature.
resource |
---|
adaac03d991e63b31b17b65a180f821b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
??2@YAPAXI@Z
CreateDCA
wsprintfA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE