CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
fa7a2ad1c519b6c2b3696c5278441366_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa7a2ad1c519b6c2b3696c5278441366_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fa7a2ad1c519b6c2b3696c5278441366_JaffaCakes118
Size
74KB
MD5
fa7a2ad1c519b6c2b3696c5278441366
SHA1
ab0107d560ebcf5bae06e21d9d3697cefe323530
SHA256
079fe9088b5fffea28f13215e6e0d1e4930da3f5e68051b96bce05b2c97ba58a
SHA512
fa4fe952b07061db8aee379697f6446c0ce7eb719ceb458a2498ca5219b63ace7fbd974c8e212a2fe4e9b86e9c64109a377973b006189ba3bba7022c9242ba0f
SSDEEP
1536:ApcvBq2h8vA0th85P12usIj6AK7VCjXo7Uout:Ap+hL7122IUoe
Checks for missing Authenticode signature.
resource |
---|
fa7a2ad1c519b6c2b3696c5278441366_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DeleteDC
srand
GetWindow
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE