CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
28a11a47e38384914fb0058ff5548afd_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
28a11a47e38384914fb0058ff5548afd_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
28a11a47e38384914fb0058ff5548afd_JaffaCakes118
Size
72KB
MD5
28a11a47e38384914fb0058ff5548afd
SHA1
1ed1b9150f9d06565f250e2c3927f7ece08b12eb
SHA256
8aea99c478b045a27538b7900e9b62315cfdf477dfa6fc9a6d75a80b58b88cd5
SHA512
025e280440bb7f45f376f94ee38fb2f5508ce4dc6e4783cd34324b09a262a51c9f8c6b46421e9d5c1b6f7b05442cc9e9aa7f0e1400f6d258b8faf2ff7721640d
SSDEEP
1536:ApcvBq2h8vA0t7Tc/zIaDNyZLbP1PaTxJIui5ZlKBz7W/:Ap+hLzbINTpcgu8Zcd7W/
Checks for missing Authenticode signature.
resource |
---|
28a11a47e38384914fb0058ff5548afd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DeleteDC
srand
GetWindow
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE