CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
51f1eef9fbbb24e31f97fabe3f8da363_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
51f1eef9fbbb24e31f97fabe3f8da363_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
51f1eef9fbbb24e31f97fabe3f8da363_JaffaCakes118
Size
18KB
MD5
51f1eef9fbbb24e31f97fabe3f8da363
SHA1
fb909b9e009bfea4c5a73f3c3bfbef61c6a3e1ef
SHA256
decf2d7b17ff8bf6061e2ad5ece1f1709f9989abc878a11c5bc087f7a7701dd6
SHA512
9b5be0f93fb692965a26eeb656aeeda2f57e2c05dc238d28e966a873039e97a016d57c7242b73f8fe0dc1d08e4d9d91220d615a2464c688ac11156961ec24fa6
SSDEEP
384:wVgNUgaBbIwF7dJe5WqCFMCsX1GfZX3e3lFSXVI3rz:w5lJe5WesXElFgI3f
Checks for missing Authenticode signature.
resource |
---|
51f1eef9fbbb24e31f97fabe3f8da363_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_vsnprintf
CreateCompatibleDC
wsprintfA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE