Export1
Export2
Static task
static1
Behavioral task
behavioral1
Sample
b56e184e8adb3729e4239732faf4bde7_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b56e184e8adb3729e4239732faf4bde7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b56e184e8adb3729e4239732faf4bde7_JaffaCakes118
Size
22KB
MD5
b56e184e8adb3729e4239732faf4bde7
SHA1
c3a53bbce2bc2ef088f97ef821aa5ed8c31739ac
SHA256
15135e789df8be10152776a31dfdf64f63c45f26da8f166515ea2dc21210c7d2
SHA512
b6fcb35e762013a472050e0f904752fd9708ffc2c67bea13adedf4d353540ec56b1ef6e81d442ad6a2ab5ff1d3dc0a658a699c9e62e1ae79d70c43a0422e0bb0
SSDEEP
384:dB4rDJvXHCK9E7U6Dxo0phLjAEqJpB8MKUvmxCuxU9YqCTQiCjNfsZP:IDBHCL7U6DxouwpJKym8ua9iTm4P
Checks for missing Authenticode signature.
resource |
---|
b56e184e8adb3729e4239732faf4bde7_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetLastError
Sleep
GetTickCount
lstrcmpiA
lstrlenA
CloseHandle
lstrcpyA
GlobalAlloc
GlobalFree
DeleteFileA
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
GetModuleHandleA
lstrcatA
CreateThread
DisableThreadLibraryCalls
Export1
Export2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ