CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
3d1f723cff8537a35489674ba2d50580_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3d1f723cff8537a35489674ba2d50580_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3d1f723cff8537a35489674ba2d50580_JaffaCakes118
Size
68KB
MD5
3d1f723cff8537a35489674ba2d50580
SHA1
e4b2d7b6f0162682438c2a0e551130b6407fdf9d
SHA256
e92a9fa9bd443446736d6ffadb8afdfb63147499c9c009464c0872f1e0e1cd08
SHA512
29814286f89822864242fb3a3bce2d1c1956cf60996cb395ffd32c0d76bdc97c4f727a61865fd0fa38e115a9ccd9ca7ad60398ae88ded3fe00822e0425a5779d
SSDEEP
1536:JpcvBq2h8vAskLIZcjWDeWK7uF9ISS88OMGGQTnxnQ/uP:Jp+hLTLbWiSVmpGGoS/S
Checks for missing Authenticode signature.
resource |
---|
3d1f723cff8537a35489674ba2d50580_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DeleteDC
srand
GetWindow
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE