CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
049bf23399adeae5f481ee7724e0c4e1_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
049bf23399adeae5f481ee7724e0c4e1_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
049bf23399adeae5f481ee7724e0c4e1_JaffaCakes118
Size
67KB
MD5
049bf23399adeae5f481ee7724e0c4e1
SHA1
4a5cb6dad4aef07ab93d7829808e809e56e3fe59
SHA256
95e7d0b63c286683aff66306009349204c8b3c629000010c68baa4c8222bf7b7
SHA512
a0640e14530fbef5b075ec164672cfaebc2368f7353e4509d5787c50db88eecb496740fcf043d8bd46d4c58dc80208c76b9f3a7cdaee63923d809d7770c11c78
SSDEEP
1536:BfQAl+7ovOK6TaVnzbGfU9Rv2cZSM3k0DuVKTxWXjwitsv145sI/MkeV/:dQAl+pvK7v2KJFq8Txu0Ss4jUkeV/
Checks for missing Authenticode signature.
resource |
---|
049bf23399adeae5f481ee7724e0c4e1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE