CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
303aa9686e8ecead1b68e9447ebf1e14_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
303aa9686e8ecead1b68e9447ebf1e14_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
303aa9686e8ecead1b68e9447ebf1e14_JaffaCakes118
Size
75KB
MD5
303aa9686e8ecead1b68e9447ebf1e14
SHA1
1f658eb8e98ea781c93c0362ba06e2d264195166
SHA256
b0281cb4da1d407f1f3754e304374bd0ca205eba0c5898c3069fa0d89180195d
SHA512
2e3c69a9dfc186e6438e9b37d7893328eea645375cfb3de42f7c389240459a7ff21a8a38d93489aee3a3f991cabe1476614a20abe5afd90d484ae55f8387dff1
SSDEEP
1536:ApcvBq2h8vA0tMPeJZ5Da0vgxPvY138kDztlI2Mhahl2eUlpnJgLlH1t:Ap+hLvPeJZ5DbvyI138kPHI2Mh9eUlp+
Checks for missing Authenticode signature.
resource |
---|
303aa9686e8ecead1b68e9447ebf1e14_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DeleteDC
srand
GetWindow
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE