CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
03f71a70090528913a098efbe66410d5_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
03f71a70090528913a098efbe66410d5_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
03f71a70090528913a098efbe66410d5_JaffaCakes118
Size
58KB
MD5
03f71a70090528913a098efbe66410d5
SHA1
f26f237a15922878404ca2ec1176bf20922382c0
SHA256
d457ce7ac9fbfe43d93659d36c77c3d5ddf03c2dd5f448108fd6a8e223445974
SHA512
dfd2c75316e713414b11624dd6affa9488b40bfc70cc5d6dd29680812017645e51e6a00f64ab9ee1a22c06415da75a4f5fedff74f3ad24afad100977dfebdcb4
SSDEEP
1536:BfQAl+7ovOKGqskmyS1PC2lMH1QPP5gTKQIrzuKZFgBX:dQAl+pKGqshVK2lIQPRcKQIrzPZFA
Checks for missing Authenticode signature.
resource |
---|
03f71a70090528913a098efbe66410d5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE