CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
006539f3868c212918442cc9b40525a9_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
006539f3868c212918442cc9b40525a9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
006539f3868c212918442cc9b40525a9_JaffaCakes118
Size
63KB
MD5
006539f3868c212918442cc9b40525a9
SHA1
8ff82d909a7e4a4f037d9d9c8fdae7008c5c86c4
SHA256
d651a649d233596afd238f4c23918d66bb70544dace01c4a20df13bbfa6753d0
SHA512
9064d69164bf3fd9126407254395ba48bffa2d0e95632599152cd3d218c22a98ae331a850b2d568accd93f6efcff1f270ea18a0040295d483dd2e58d0fa36106
SSDEEP
1536:PSwlKC19SnIhSmetAYbmkX4TnTIgR77MY5QP/ZNx4d3N9WRPZ+:HAMdGFmrQHZNxoqRPg
Checks for missing Authenticode signature.
resource |
---|
006539f3868c212918442cc9b40525a9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_vsnprintf
connect
DeleteObject
UnhookWindowsHookEx
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE