CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
05468be071e0751f54f30f8cba625659_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
05468be071e0751f54f30f8cba625659_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
05468be071e0751f54f30f8cba625659_JaffaCakes118
Size
60KB
MD5
05468be071e0751f54f30f8cba625659
SHA1
b23243af51a69266da4e307ccd9d6a25897dfd0a
SHA256
d6e51fdbaccc7c02f4539e916cec593146be6c44c9658b0ab0227f1327a0a7c0
SHA512
840d5023e13a0ab100a0d035f61e5a8917cfebc2612da36c8a22f6bdfb967b79e7827bc12521bd64c7e3ff27994915f2a4cfd14f0acabb8f107543d7d048b942
SSDEEP
1536:BfQAl+7ovOEBrFE74UuSCR/yjzALPX+38u2G6NNkqW7RTRf6Lu:dQAl+pEBJMCRajWPyt2GrRVP
Checks for missing Authenticode signature.
resource |
---|
05468be071e0751f54f30f8cba625659_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE