CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
11f9972f07d5042de830a8c2a05cd23d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
11f9972f07d5042de830a8c2a05cd23d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
11f9972f07d5042de830a8c2a05cd23d_JaffaCakes118
Size
19KB
MD5
11f9972f07d5042de830a8c2a05cd23d
SHA1
60056a0b4991dd090cd91bbd17cac77b6b98e6d8
SHA256
dfe5e8ef59db19a216918ce5bf14aab1d370a30fb4088b8835a6c361dbd2e2b5
SHA512
21907c1b84d984dd97088e2565ae7c369586961e110a52adeffaab15e9ca2ddcb8398cc3b62e8c5a3c1969c03ba899db0779801d0fff3e6d3e8a80b1991be63c
SSDEEP
384:9DN2FHYm3pUiY5dFo8feSCn7QvJPisQ2/ITYb/UbHZGfGOHfl+zK+sik:9DNJm3rwdS8fznvJhATHHMfGOH9X
Checks for missing Authenticode signature.
resource |
---|
11f9972f07d5042de830a8c2a05cd23d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_stricmp
GetClassNameW
DeleteDC
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE