CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
289dee8e28813c12870885c47a1158fc_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
289dee8e28813c12870885c47a1158fc_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
289dee8e28813c12870885c47a1158fc_JaffaCakes118
Size
80KB
MD5
289dee8e28813c12870885c47a1158fc
SHA1
edd2c38ba9e0dbf542ebd2fccf0d3a996af29039
SHA256
ca27f580b056ad797297603982f050767a2088be1df353bf7c2e71ecdabe4f86
SHA512
85e8f9d274024d0b8c21d300f611b24ad540571dc7ca8ec1ed27e87f5bd335ed7b638602e466c1410506fd46919507f5f432586885d37033a999d0a92faa6e7b
SSDEEP
1536:JpcvBq2h8vAQIkLjVyveFvgSDPD0ZjcuSocWwlVW2+ALhulM7:Jp+hLQdLpyveFj+GoSVhua
Checks for missing Authenticode signature.
resource |
---|
289dee8e28813c12870885c47a1158fc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DeleteDC
srand
GetWindow
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE