CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
0550166536ce66a712fc35fdd915778c_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0550166536ce66a712fc35fdd915778c_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0550166536ce66a712fc35fdd915778c_JaffaCakes118
Size
61KB
MD5
0550166536ce66a712fc35fdd915778c
SHA1
a0c3bd09700492626354a4448f93e359b23b53c6
SHA256
99b9c79af99567cc8447aa483fcec5798912232bc38e13d3105b22546c64a228
SHA512
7678c27d57391c2a2ad022ce72108b12b766d8d243a31658f86c5930b7d1061b8dfa6b779c314a4394aa596953abae2bb0163bda5df469ae3f1dcb8c5c781707
SSDEEP
1536:BfQAl+7ovO+ZN/mEZbF4unNoTUDY+AS80f42ur+9y:dQAl+p+ZN/mEZbF4unNUnLw42w/
Checks for missing Authenticode signature.
resource |
---|
0550166536ce66a712fc35fdd915778c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE