CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
0652edb8d13a815ac72dd0fd5f0c9981_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0652edb8d13a815ac72dd0fd5f0c9981_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0652edb8d13a815ac72dd0fd5f0c9981_JaffaCakes118
Size
19KB
MD5
0652edb8d13a815ac72dd0fd5f0c9981
SHA1
8c114f0792ab461368bd1b31c62902eff907b7ad
SHA256
0831070199b978a589aa5de835dc9bee346074f16827d5466bf228a177c3c8dd
SHA512
00afc34d4e4d9cc590777ccfb3fda7ea28f9a1c07d116500731473beffb602c20c632cc70e09172375685bc90825f7817c256c961768c9a46539e4e65b570874
SSDEEP
384:08APHv1PoRjj8Y7U9TpZxmapfJ23Tgv8/r5BDA:ePPWV81cGh23S8TfA
Checks for missing Authenticode signature.
resource |
---|
0652edb8d13a815ac72dd0fd5f0c9981_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
fseek
CreateDCA
wvsprintfA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE