CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
0507bb2347d256676f78c952e214908e_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0507bb2347d256676f78c952e214908e_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0507bb2347d256676f78c952e214908e_JaffaCakes118
Size
71KB
MD5
0507bb2347d256676f78c952e214908e
SHA1
5efe7e7f901d6f592c28cc489e093ef17d7cea70
SHA256
dac42cf5cc32c7ef9f8499d296010a69620a959f1d3c6f963878c2251bfed344
SHA512
dea563e029eaf1542fc1860d517af9f13d12a2659e215ceced89412e6961786c38d9b44b00f70903e2a54d48683be65dc429cc9bd7de4f12b8fb0b927afd2c1a
SSDEEP
1536:BfQAl+7ovOhldRFl5aPMIzoZ4viLtb7f3mQ3Vuw5WoXzOqzoXsVP:dQAl+pDdRn5gNY4viLt33mbw5rXzOq1
Checks for missing Authenticode signature.
resource |
---|
0507bb2347d256676f78c952e214908e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE