CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
2bf4b31c207982099a7d13d43298a9e9_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2bf4b31c207982099a7d13d43298a9e9_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2bf4b31c207982099a7d13d43298a9e9_JaffaCakes118
Size
20KB
MD5
2bf4b31c207982099a7d13d43298a9e9
SHA1
f06c43fa1c7dce5a46f7d5ad790941e7c77d3173
SHA256
dcca8245b993ab822a084da43c3c1c10cdca192ef09aa25ca7d808ea3201f933
SHA512
7da49b6665d50e597375f4350f61df33cadc4e87b4c6337b65ec03dce042e7d12e808c8f8d9d1b2767641f2de98be19e188a894d9f49a895eea51868f3983969
SSDEEP
384:Qp8WvepK6kOhX56w8qBtLYG0w+f2ci4jvSV3DIz5lrEK/5FnM+of:QdvISwJYqBlofbi4YzIHrEKTnM+Q
Checks for missing Authenticode signature.
resource |
---|
2bf4b31c207982099a7d13d43298a9e9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_vsnprintf
GetDeviceCaps
GetWindowRect
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE