CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
d0dc40360bf6e23cb45de9d760fbc432_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0dc40360bf6e23cb45de9d760fbc432_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d0dc40360bf6e23cb45de9d760fbc432_JaffaCakes118
Size
58KB
MD5
d0dc40360bf6e23cb45de9d760fbc432
SHA1
d6b0f4e7707fdc32b884d2283bc3b84390621129
SHA256
2051e07bd65f20c72a19b703d275ea409f9cf77b7b9b37662a5204f06a9fa0f2
SHA512
178cd0a9be0ac03096a70cbb579c12c8035c38a9c8a5613eeaa4ba5a0325ba81a8135f0bde09df19cd27049ce055ff60a13124412cc4a627245bcc076da1e8fd
SSDEEP
1536:Zwoq+LsVXPTHgJTDId0WvY8xuH4HMU3h5NbvET:ON+oVXLHgJ/IGWA8xW4sC5NbvET
Checks for missing Authenticode signature.
resource |
---|
d0dc40360bf6e23cb45de9d760fbc432_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_stricmp
GetWindow
DeleteDC
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE