CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
573a21695f7e49b332bf93561388a4b0_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
573a21695f7e49b332bf93561388a4b0_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
573a21695f7e49b332bf93561388a4b0_JaffaCakes118
Size
69KB
MD5
573a21695f7e49b332bf93561388a4b0
SHA1
5c53e7f4f98264d7e6f897408293f8dd1aa218eb
SHA256
a63ed30b090901ca63ab3a475a52b905a14f746e37a351626127b875fda6d50c
SHA512
3bd9fc4c86a081da256b70653160e19e246f414494cf8b18a819a255885d34d685a1df40bca14b9478bd503948a56ad8a958c453133d366eb976934eebc77336
SSDEEP
1536:iFzN559FOnH7KQnEiJeKxwJSdNWFoghMAa3:gzP8bKjiJeKC08FogM
Checks for missing Authenticode signature.
resource |
---|
573a21695f7e49b332bf93561388a4b0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
_strcmpi
GetAdaptersInfo
BitBlt
GetWindowRect
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE