CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
041ab8dfeb0a1d5715ad44e6bd95096a_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
041ab8dfeb0a1d5715ad44e6bd95096a_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
041ab8dfeb0a1d5715ad44e6bd95096a_JaffaCakes118
Size
65KB
MD5
041ab8dfeb0a1d5715ad44e6bd95096a
SHA1
b590352a99a95e5a802390fdde7e1721fca728cb
SHA256
c0ff9dfebe74ac526219f9afc5a746ad163384d90917cc408acf556d038aeb4a
SHA512
232e5094a2993948c6ff4b2598b0cf209c3a6f95acd5c4341bcab3d7caa7793ff635015a4edc7343fa028ae88ebfa72cc081b5c3f586262befffa6992483f614
SSDEEP
1536:BfQAl+7ovOML7atpG8db27UrHhPBxqXZVO8VY7+sI:dQAl+pMLkRq7iHFqpq+sI
Checks for missing Authenticode signature.
resource |
---|
041ab8dfeb0a1d5715ad44e6bd95096a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE