Export1
Export2
Static task
static1
Behavioral task
behavioral1
Sample
575b31742c8c30e6f57a0cf7e4616a89_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
575b31742c8c30e6f57a0cf7e4616a89_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
575b31742c8c30e6f57a0cf7e4616a89_JaffaCakes118
Size
22KB
MD5
575b31742c8c30e6f57a0cf7e4616a89
SHA1
e000dfd4f256af1ed1a499b8b78cb466a73ab7a0
SHA256
af2dc71c028f9a804e61e6bff4f067355193f820b34f1921ccc501b2fc3de2f9
SHA512
276dff5f263ea9eeb62fc891efc7d025fea0917c6dea519be4614487ebc0dfb3df24fceb2de51b471a401cd14c83a6492fa832554970512870f07913a4aa2b9c
SSDEEP
384:vGdWzyj1Hj75GMEqwD0mWoddhq1xoMfNDsCaacY8aC2jDgHWkCTQiTOlf95Vfsq5:edcClPMMtwD0mWUh8D9hcY8a3IHW3Tgr
Checks for missing Authenticode signature.
resource |
---|
575b31742c8c30e6f57a0cf7e4616a89_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetLastError
Sleep
GetTickCount
lstrcmpiA
lstrlenA
CloseHandle
lstrcpyA
GlobalAlloc
GlobalFree
DeleteFileA
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
GetModuleHandleA
lstrcatA
CreateThread
DisableThreadLibraryCalls
Export1
Export2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ