CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
fc3c990eab8d3b7f4181de81176cd896_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
fc3c990eab8d3b7f4181de81176cd896_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fc3c990eab8d3b7f4181de81176cd896_JaffaCakes118
Size
78KB
MD5
fc3c990eab8d3b7f4181de81176cd896
SHA1
ff966824c367c6d6668628ade8ab1f1a21c751ab
SHA256
1ad5ff187d50691386958fe0200725c82b96fbdaa08e90dc156a0771886ac544
SHA512
bf744d1ccc48d32fbf4bd319e01da65a16df3ea18d7e5bfac591042bce888fa91a79e680cceef8ed71d89ce707ccfe17dff3cf4049e91681f73095eb8681c806
SSDEEP
1536:ApcvBq2h8vA0tsYCwCBXW6E+6gv6kIf3SOOE:Ap+hLDqCE+fv6kIfiOh
Checks for missing Authenticode signature.
resource |
---|
fc3c990eab8d3b7f4181de81176cd896_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DeleteDC
srand
GetWindow
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE