CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
03488db91724705f3b50a8589b10a115_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
03488db91724705f3b50a8589b10a115_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
03488db91724705f3b50a8589b10a115_JaffaCakes118
Size
57KB
MD5
03488db91724705f3b50a8589b10a115
SHA1
95a5aa375c43c2c4337bf76d3bea031c723f1773
SHA256
c9475704b4179ee3c09df4bd9fc2cfb3826eb69e456a853b915cff1bb4b5efc7
SHA512
ac5f9e8e073d76d3e7e772e7703c39ddc0ca8544ed22ea584d4373e06a5992e5ff35362bc750ba703b4e4852427a8430acb5035381a952ed3f7419bb31012241
SSDEEP
1536:BfQAl+7ovO9M4xkRRxQnsp7OIY0kILiGk7hNSh3S:dQAl+pKc6nQnspqX0b2p
Checks for missing Authenticode signature.
resource |
---|
03488db91724705f3b50a8589b10a115_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE