SDDynDll01
SDDynDll02
SDDynDll03
SDDynDll04
Static task
static1
Behavioral task
behavioral1
Sample
04c9b28d4b737c97c40fd64cbfd18c95_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04c9b28d4b737c97c40fd64cbfd18c95_JaffaCakes118.dll
Resource
win10v2004-20240910-en
Target
04c9b28d4b737c97c40fd64cbfd18c95_JaffaCakes118
Size
84KB
MD5
04c9b28d4b737c97c40fd64cbfd18c95
SHA1
d37eb29f533dbfa1c6ceecf1f45b696c576d78b9
SHA256
6933fc49a4c1463f1d6bdcada88b601cc473a0e31507288deb60bd40384e3171
SHA512
2aa03df32de1abe7b11c742b0dd049ada1b2dbf075b79eefddab06661ff2dc0d04a84926c453632eda85ee661ddcc6297d5fc07db6b816d87ba82ba7f6694fe2
SSDEEP
768:wuX/UeyVkv3guSp5w9JNtn+A7Y37qkhKkLDdF77gB3HxyHENtwOjF+F0nF62t06K:9yavG5GDtn+A7m7qknLWWOAF0gY0FV
Checks for missing Authenticode signature.
resource |
---|
04c9b28d4b737c97c40fd64cbfd18c95_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
TerminateThread
GetModuleHandleA
CreateSemaphoreA
ReleaseSemaphore
WaitForSingleObject
GetTickCount
SetThreadPriority
CreateThread
SetPriorityClass
GetCurrentProcess
GetCurrentProcessId
CloseHandle
Module32Next
Module32First
CreateToolhelp32Snapshot
VirtualFree
VirtualAlloc
GetProcAddress
SuspendThread
FindWindowA
GetClientRect
GetWindowRect
_initterm
free
_strupr
memcpy
strstr
malloc
_adjust_fdiv
SDDynDll01
SDDynDll02
SDDynDll03
SDDynDll04
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ