CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
013b3f5be98f148a0f9ed495329f4a38_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
013b3f5be98f148a0f9ed495329f4a38_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
013b3f5be98f148a0f9ed495329f4a38_JaffaCakes118
Size
75KB
MD5
013b3f5be98f148a0f9ed495329f4a38
SHA1
64e334fdafbafc4ceafe8391e10fa5c2ab075d5d
SHA256
1a189360b7de3b9eef2b6a837c9b3b792133a39452711775f4477b8deae757c7
SHA512
1d8cdab5f5596849da4d2d7066fba455dbdc89deae0e5f90c36df62172968ef04bcc4cd48c4a828cb48789356652c8e2e292917c21eef6c2b9098b3da119b8b6
SSDEEP
1536:PSwlKC19SnIhSmetUxMjZ3jgy3Vhh+PrL6mrHZbxoXY0gNoE3:HAMnMRHhh+PrDHlxoXY53
Checks for missing Authenticode signature.
resource |
---|
013b3f5be98f148a0f9ed495329f4a38_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_vsnprintf
connect
DeleteObject
UnhookWindowsHookEx
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE