CreateXmlReader
CreateXmlReaderInputWithEncodingCodePage
CreateXmlReaderInputWithEncodingName
CreateXmlWriter
CreateXmlWriterOutputWithEncodingCodePage
CreateXmlWriterOutputWithEncodingName
Static task
static1
Behavioral task
behavioral1
Sample
dfa48ef4cdcc2924c203e861c4aef87e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dfa48ef4cdcc2924c203e861c4aef87e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dfa48ef4cdcc2924c203e861c4aef87e_JaffaCakes118
Size
74KB
MD5
dfa48ef4cdcc2924c203e861c4aef87e
SHA1
8407f19ee294f6e857a7689494784ef8e7ac65fa
SHA256
d6806cde0378fcd001204ced156a49e1751c89015569d785e131d2e73d707931
SHA512
8ee50b0cebf312347e68b9ebc5ea8b576973c30f3448e4a8c0f147a59434654989707f383b8bbeca290e5828518c14411ebf5172c00cc117d9445bf6c9b91509
SSDEEP
1536:e5DgA9Gw1sP7tC4vbiBaFMYNcOys9Pcy8VG/kxxyVX2sH0OK2/d34H:e5Dgo+84JFq0SVDxY0OV4H
Checks for missing Authenticode signature.
resource |
---|
dfa48ef4cdcc2924c203e861c4aef87e_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
CreateXmlReader
CreateXmlReaderInputWithEncodingCodePage
CreateXmlReaderInputWithEncodingName
CreateXmlWriter
CreateXmlWriterOutputWithEncodingCodePage
CreateXmlWriterOutputWithEncodingName
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE