CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
033982d584dfac0b9d88fa1f11187eda_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
033982d584dfac0b9d88fa1f11187eda_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
033982d584dfac0b9d88fa1f11187eda_JaffaCakes118
Size
77KB
MD5
033982d584dfac0b9d88fa1f11187eda
SHA1
353d33d5fdaa316e9107b8472bf6dd3c25b1aebb
SHA256
c2ecc8152ef8f0e5a51be48beb12aa2697ba1519c144729afeed8aedbe084dff
SHA512
c669eb2672876cd6e2fa2047b46360d958768935021e68b8a1d302867adcf7aff67834d46305dc84ecc91992dfa3c9dcd2ee34653d1b62324cab661662de402b
SSDEEP
1536:BfQAl+7ovObQm7Ed6ugcqQDi0YiCijRgEcoP9QAblXy2EBCGRBp9oaESM3Uojs9U:dQAl+pbQmMlRYJijROE9VEtBCojoaW3l
Checks for missing Authenticode signature.
resource |
---|
033982d584dfac0b9d88fa1f11187eda_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE