CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
eefc9cd9ef8561cb9e6fa06f3a6db139_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eefc9cd9ef8561cb9e6fa06f3a6db139_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
eefc9cd9ef8561cb9e6fa06f3a6db139_JaffaCakes118
Size
74KB
MD5
eefc9cd9ef8561cb9e6fa06f3a6db139
SHA1
57f278a3818ed82582d3c19225d3eea285a4c740
SHA256
52ac2e8d3b9cc9e49d3140ad19ecd2b60ec5cac5943baec5f2098288541fa578
SHA512
abbfefc1f32e015886f97fd512c7e383019211cd09e1f06bbb8e2fe4edd020b00f094648ee3b2f4775cf00662e1c709e7631eb8d895c4b840fd8a31fd59f7521
SSDEEP
1536:n2NNyGkHjkDzELuOtOkmCeUPRRcpYsHPzzMVZ0gaPCzru:nuAGWIz8oW5mp/vsX0BPCW
Checks for missing Authenticode signature.
resource |
---|
eefc9cd9ef8561cb9e6fa06f3a6db139_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_vsnprintf
GetDeviceCaps
GetWindowRect
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE