CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
14b26437ea713edc2f86d5870022fbfa_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
14b26437ea713edc2f86d5870022fbfa_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
14b26437ea713edc2f86d5870022fbfa_JaffaCakes118
Size
79KB
MD5
14b26437ea713edc2f86d5870022fbfa
SHA1
cc6d5a36932fa92ad48bd5183fa0c5c9e2a56732
SHA256
bca34a16ed9c90d8bbfca49a1409e51ea805fb37484bbe3889a56afa7d2670e3
SHA512
3a806aa7acc9808b3c6770f2722b4015963f434c582f0e4c9e418dcbfd7f35caca98d74dce195127d98d5d5a12ab5440b8de1ab2dd522ff6b59f88b348ffe077
SSDEEP
1536:n2NNyGkHjkDzELuOtiadtcfFHJF6NzlDSH1FUy5RWJ5dGXhy3Tox:nuAGWIz8ddefF36N5DiUp5Ky3Tox
Checks for missing Authenticode signature.
resource |
---|
14b26437ea713edc2f86d5870022fbfa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_vsnprintf
GetDeviceCaps
GetWindowRect
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE