Export1
Export2
Static task
static1
Behavioral task
behavioral1
Sample
52f82af8599f9c77d53b76607b7a242d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
52f82af8599f9c77d53b76607b7a242d_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
52f82af8599f9c77d53b76607b7a242d_JaffaCakes118
Size
22KB
MD5
52f82af8599f9c77d53b76607b7a242d
SHA1
623c96a3e7e2ef5242faf725bd9907ec247c78b5
SHA256
97f991d6f1f1dd76d9799ef60ac78464296211d862a1f8c4b004ab586248c29f
SHA512
d98d66263e8b2ce201728079747d0ce8c68e98238e4c9824af9f4fc129dee29502e169145299c5db65ee8e2242ffb2ab95e443f8853d6c167f569a894de8c57c
SSDEEP
384:dB4rDJvXHCK9E7U6Dxo0phLjAEqJpB8MKUvmxCuxU9YqCTQiCjNfsa:IDBHCL7U6DxouwpJKym8ua9iTm7
Checks for missing Authenticode signature.
resource |
---|
52f82af8599f9c77d53b76607b7a242d_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetLastError
Sleep
GetTickCount
lstrcmpiA
lstrlenA
CloseHandle
lstrcpyA
GlobalAlloc
GlobalFree
DeleteFileA
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
GetModuleHandleA
lstrcatA
CreateThread
DisableThreadLibraryCalls
Export1
Export2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ