CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
aeb495d70f952d16f6a8e1aefac39676_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aeb495d70f952d16f6a8e1aefac39676_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
aeb495d70f952d16f6a8e1aefac39676_JaffaCakes118
Size
62KB
MD5
aeb495d70f952d16f6a8e1aefac39676
SHA1
9f816f1f09a69018336b75ed949fc1d8fc672e86
SHA256
328574af1db21d6f8797bfb839aa25b72e7bf68fff9368f4c99fffe03fcab159
SHA512
6711314045796ac4aea9e3a08ae0f9fb7c93ef353e9bcef46ce74b4d8651c182dce5bb0ff5aa471db6c9e6c0fe7a694c307d194c6e2e65a216911eb0e8702b46
SSDEEP
1536:x6XibTmzmehHBC3osMFerUkR+y3725nYWnex7L:x6qmjhHs3oyUkR2YWeVL
Checks for missing Authenticode signature.
resource |
---|
aeb495d70f952d16f6a8e1aefac39676_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
GetDeviceCaps
GetClassNameW
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE