CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
054768ce02f64f1f953f011c95c58297_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
054768ce02f64f1f953f011c95c58297_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
054768ce02f64f1f953f011c95c58297_JaffaCakes118
Size
53KB
MD5
054768ce02f64f1f953f011c95c58297
SHA1
368d3325b08da0d4535c367c663c344d734189bf
SHA256
914ee2907109c102d1a381505a93442a7128aa9f4ea3e4a2fd1f7521085aed94
SHA512
8f71ccc3090c98a5a0e7b0dc326160f163485d047f0789430da76eb56f73f2aca9a136ae0742903e87a41acdbca20bfa5a4b942ca97d588bb0d6aa56ef6e252c
SSDEEP
1536:BfQAl+7ovOHR+3Ev/fJ2+eGaHbALcbSCDENBMpG:dQAl+pHR+4Z2+eGaHbz/oBMpG
Checks for missing Authenticode signature.
resource |
---|
054768ce02f64f1f953f011c95c58297_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE