CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
036b6c139d95fa1e36c1416305e1f471_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
036b6c139d95fa1e36c1416305e1f471_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
036b6c139d95fa1e36c1416305e1f471_JaffaCakes118
Size
68KB
MD5
036b6c139d95fa1e36c1416305e1f471
SHA1
535313ee0e10e0ad1a0ff77482e491ec372b1a56
SHA256
c86ed3a44efb8124a6913332ef7bf59a26d2a2832c48247dee03454f8bc52f10
SHA512
b00aaf25f0c50bc1a0b74e321edca4a603a0ba7c44cc61cd3cbc2ae192364f7c04c1204065a3d365d7c8254bc74f1f707886f1f325496234b10770524b5f14df
SSDEEP
1536:BfQAl+7ovORxxxtrLO8ftlcw199GIh6eNSEpdV2Wcgkm9W:dQAl+pTprLOLwjh/MEL0vgkmc
Checks for missing Authenticode signature.
resource |
---|
036b6c139d95fa1e36c1416305e1f471_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE