CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
b068e094588488b85c92fb66bafd96d8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b068e094588488b85c92fb66bafd96d8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b068e094588488b85c92fb66bafd96d8_JaffaCakes118
Size
70KB
MD5
b068e094588488b85c92fb66bafd96d8
SHA1
12feebff5cf7cf987b2547d679622d83a0f993c7
SHA256
fa74dbf5bdf4ec23c2b732696014cea15b2280f3aa6d7124a82d6dba7d81f2ca
SHA512
52d6d9c7fa490aac07f643b0bbf0b332d65a8e01505e3d2a80944df7ad0500a937b4bcb64a53b73389ccda9361b808009a1dee633a2ca5849891cb0c6c885b63
SSDEEP
1536:PSwlKC19SnIhSmetyx9SOSU3ENLC5FooP/nkmEk:HAM1xLSU3ENujoo3Jz
Checks for missing Authenticode signature.
resource |
---|
b068e094588488b85c92fb66bafd96d8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_vsnprintf
connect
DeleteObject
UnhookWindowsHookEx
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE