CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
0395ab69ac7ef765af3990623225f475_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0395ab69ac7ef765af3990623225f475_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0395ab69ac7ef765af3990623225f475_JaffaCakes118
Size
59KB
MD5
0395ab69ac7ef765af3990623225f475
SHA1
221e1e02af6074f6e5e601d92d3d3f6c8580b3cd
SHA256
9604825d9f88d04007efd0d8875bb85595f77d1dfd7785266cb0bf49439b0efc
SHA512
1aa43de35e51c1d135188f4b5d14eb37e45a82f3738d6f4220d1fcc0293eaf55257fe6b19fe186d1d48c1fb78399912e47db345bdc724ffe309c09541aa75dfd
SSDEEP
1536:BfQAl+7ovOmntbj+BmqdceVyaU+My9pxV9L:dQAl+pmnt+cxm/L
Checks for missing Authenticode signature.
resource |
---|
0395ab69ac7ef765af3990623225f475_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE