CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
13dd97d42c11320afd5326dd4ead094d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
13dd97d42c11320afd5326dd4ead094d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
13dd97d42c11320afd5326dd4ead094d_JaffaCakes118
Size
84KB
MD5
13dd97d42c11320afd5326dd4ead094d
SHA1
89e58723431141d8b2e91ab46b09bbfc1dd7bb6a
SHA256
e93d90ba56e2bed128537d5eaff37963221492086622c872d410a4499658e2bd
SHA512
470040f23897736f6fedb78697feaa68e00bf3d36cdedfd86d2179bd84ffaafaec5fd80fc156a91ca30354585c997c7880b663b354fda254312df08284e34009
SSDEEP
1536:n2NNyGkHjkDzELuOt0cD7kfXT1Fz2IKAHveqTz1XjGWSYiz6zbzOe/pg:nuAGWIz80q81QIteq/1qYxdW
Checks for missing Authenticode signature.
resource |
---|
13dd97d42c11320afd5326dd4ead094d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_vsnprintf
GetDeviceCaps
GetWindowRect
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE