CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
bb728885658bb56ece9cb6a2af9ab85b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bb728885658bb56ece9cb6a2af9ab85b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bb728885658bb56ece9cb6a2af9ab85b_JaffaCakes118
Size
69KB
MD5
bb728885658bb56ece9cb6a2af9ab85b
SHA1
9bd471d921f41413d969fc3d8f904ea36efca647
SHA256
8d4be57efa8dec1e0f322fe0137db594ab75ab970bd9192a28260454735c4ba1
SHA512
5393f2b0e68e232f1fce7661def0dc4a687b26ddfcf01422748d6112d7ab5f92dd9ebd92ff15f107eb3f914a9a78bdd48af99079c73778c4654552c74073ed0b
SSDEEP
1536:ApcvBq2h8vA0tYDdXtnUwCJMIO9ppx0vFd/R:Ap+hL3Zq9JMjppxOR
Checks for missing Authenticode signature.
resource |
---|
bb728885658bb56ece9cb6a2af9ab85b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DeleteDC
srand
GetWindow
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE