DecryptBase
RunPECode
Static task
static1
Behavioral task
behavioral1
Sample
b2a52c3cc01c9264e2b60a5f3c69b2b2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b2a52c3cc01c9264e2b60a5f3c69b2b2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b2a52c3cc01c9264e2b60a5f3c69b2b2_JaffaCakes118
Size
4KB
MD5
b2a52c3cc01c9264e2b60a5f3c69b2b2
SHA1
0a47f9f1f42b1da5c75d993da86e93a74ae6a248
SHA256
1fbbefa8986c5a4145d0a7df2a18f086081d6c1dd3266eaad60c93479a01ed49
SHA512
9f4f4dad061152d2eac50496ef82296668111470ada48c6732c737b2d5c53a4ce25f911c18d442d8a5825c0c858e6f826055095cc56c1b7d0814d2cabb1a452e
SSDEEP
48:S+wBvhBHWyc2g603yv7v3QM5P1N91poxxhPuVsmFj41ZAHzMAzMFl+ADyblbKNwM:ebWyNeiv0aPBboxx6s0MUTzDuNwM
Checks for missing Authenticode signature.
resource |
---|
b2a52c3cc01c9264e2b60a5f3c69b2b2_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateProcessA
GetProcAddress
lstrlenA
DecryptBase
RunPECode
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ