CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
c272d3947818c4a24f8813a1abfabeea_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c272d3947818c4a24f8813a1abfabeea_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c272d3947818c4a24f8813a1abfabeea_JaffaCakes118
Size
65KB
MD5
c272d3947818c4a24f8813a1abfabeea
SHA1
c7960da17dfe1b9e64ed7243cc773c02c36c8bad
SHA256
338aa569478b8b26a7db78425cd4379c2a9b19f9ebbae502df762cfbb1c236e6
SHA512
a5e390fd920bd9a176b8085eb452af9dc0df57b3dc81f5b3e3f96f3edccba066ca6e58e0508aa85b2cae5ea9e4752c4d3e9bb10b0d2af51ad3b8ac3df745f592
SSDEEP
1536:/7MYloVC9UD1T7t36TjfFPJUkl4F+wF4UT+Ei+PP:A44C9GkTjfFPJnMNqUSgP
Checks for missing Authenticode signature.
resource |
---|
c272d3947818c4a24f8813a1abfabeea_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_vsnprintf
connect
DeleteObject
UnhookWindowsHookEx
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE