CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
b324513280868afa69d07c44bf9332d6_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b324513280868afa69d07c44bf9332d6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b324513280868afa69d07c44bf9332d6_JaffaCakes118
Size
78KB
MD5
b324513280868afa69d07c44bf9332d6
SHA1
35a7431f4b8a9bc41695b82f0ba78e3e490eb138
SHA256
76dfeabc50f84e6d87054cd3e1f7bf12c9edf9ddde46b2fcdff8edfdb90bf56c
SHA512
b8cb1a8bfd75bd30812f0a5f04205ddfd12760f192417f4603bc3421c36dc7a6b2809902f849e5327d7a554812c053e17ca3351c23a8a2dca2a5e5c84410fd5a
SSDEEP
1536:vvbRiV0uSAO2ltbs4cgI0h8zpGBedFfejhblsh62Fg1NSlnLLzjjD:3qSA9stgI0hqpHfWjdlsh621nfTD
Checks for missing Authenticode signature.
resource |
---|
b324513280868afa69d07c44bf9332d6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
??2@YAPAXI@Z
CreateDCA
wsprintfA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE