CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
d1e81b40da8577dd3f4c801ca3798379_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1e81b40da8577dd3f4c801ca3798379_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d1e81b40da8577dd3f4c801ca3798379_JaffaCakes118
Size
61KB
MD5
d1e81b40da8577dd3f4c801ca3798379
SHA1
34c17e2ecce88e34f22cfadbbe79326fd90e7b16
SHA256
a323fdba98b5e2fb7befdd03b4c8bb9c0e8e868b7efa03207c08bdf3ef0b7502
SHA512
9d40965c3c66cb6dd000bf79fa986f7f5036e5f34da73d85b5e6c8ba5bc08d7e409a3a774cb88ae0dbc24d8fc3a0e686455403eb4eff44c7722d70b049c655de
SSDEEP
768:yLrBvXsGRxEUhGV0c7SxaO2HiONJVnw3jOFbblIuSkFXHOta69j0b1k0MH6ETqGR:uvbRiV0uSAO2pjnf/loyXq39El9Fij
Checks for missing Authenticode signature.
resource |
---|
d1e81b40da8577dd3f4c801ca3798379_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
??2@YAPAXI@Z
CreateDCA
wsprintfA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE