CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
03cfc3e32791781e1e876584c79da74a_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
03cfc3e32791781e1e876584c79da74a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
03cfc3e32791781e1e876584c79da74a_JaffaCakes118
Size
58KB
MD5
03cfc3e32791781e1e876584c79da74a
SHA1
5b5470c7997075da85c2c684ed0d14e09bd0c894
SHA256
c88a9d213a3825feec76b67e0aa284a83eac5507e2a756c0ccb58c5d89fb87e6
SHA512
ac113bf374a8eb2338299592adc966fd27f68962e97069470a441187705a24b7b18f8251436512231a25ccb455b115ef8d60a0b1178f6c6d3abf1ff4a6bd2564
SSDEEP
1536:BfQAl+7ovO97OyQ6N0SbYMZ7n7jafcjV6au+taLS:dQAl+p97OyQedYw7n3L6au7S
Checks for missing Authenticode signature.
resource |
---|
03cfc3e32791781e1e876584c79da74a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE