CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
26670dd11f33801e7ac4bb03ef284d47_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
26670dd11f33801e7ac4bb03ef284d47_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
26670dd11f33801e7ac4bb03ef284d47_JaffaCakes118
Size
54KB
MD5
26670dd11f33801e7ac4bb03ef284d47
SHA1
d16d5412160c48a8ca7f262fd9891a1762e09a64
SHA256
f52bdf0f373204c74c16d695fad20ad6a00fda62635db19ec16994fc9668d3d7
SHA512
05d0fea2f9788bc4f9a0c8b4448683d423a69467fcaafd1207f49514fc699e38a0724c89202fdb8333d761dc9ebada89e0f84dff8788d301ef3d6ff038a94387
SSDEEP
1536:Wxwdae3CTfv1liOO/CYijiglITLbgshpkEdLPE/Y6Uz:WydlCrv1e4mglcbgsh2EdLc/9Uz
Checks for missing Authenticode signature.
resource |
---|
26670dd11f33801e7ac4bb03ef284d47_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
exit
GetWindow
DeleteDC
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE