Export1
Export2
Static task
static1
Behavioral task
behavioral1
Sample
3798a35b9012f6ad63060057547659d5_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3798a35b9012f6ad63060057547659d5_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3798a35b9012f6ad63060057547659d5_JaffaCakes118
Size
22KB
MD5
3798a35b9012f6ad63060057547659d5
SHA1
c172c1200d08b0beb46568a610b874621d2b20af
SHA256
a9ce79669d2141091b591ec1567575a2e8c24c8ef702fecc6bdae6755038ef8b
SHA512
a2ce2772c764284fb3c51922d920fde1d4558a82d773e8cbd2498a5366cbb32b3149af566dfbf93aa49e753717497c06765bc42d528dfe84a4c968d9899aedec
SSDEEP
384:vGdWzyj1Hj75GMEqwD0mWoddhq1xoMfNDsCaacY8aC2jDgHWkCTQiTOlf95Vfs0:edcClPMMtwD0mWUh8D9hcY8a3IHW3TgT
Checks for missing Authenticode signature.
resource |
---|
3798a35b9012f6ad63060057547659d5_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetLastError
Sleep
GetTickCount
lstrcmpiA
lstrlenA
CloseHandle
lstrcpyA
GlobalAlloc
GlobalFree
DeleteFileA
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
GetModuleHandleA
lstrcatA
CreateThread
DisableThreadLibraryCalls
Export1
Export2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ