CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
056255a29f7366427d92f02fe245cfbd_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
056255a29f7366427d92f02fe245cfbd_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
056255a29f7366427d92f02fe245cfbd_JaffaCakes118
Size
66KB
MD5
056255a29f7366427d92f02fe245cfbd
SHA1
56b33c7441b7305935f84306e073932a25b72433
SHA256
d022641ad69192849fbd8ed73da43c1ffbfb85e00f6bc4ce50a29513dca06ae8
SHA512
4dfdbc38718b1c561938fdefdf392e549816b44634821a182ee4195a28d0cd1d5800fe16d85d2b89837f17276ee8274d4222618bfb5ad428d9c1c4eb575c4448
SSDEEP
1536:BfQAl+7ovOQLX6MJ1Y4uBui//1e4Q8qaSvlEJ8n8MI9AywU0CTSA60g:dQAl+pMzz0ui/9ePaC1qA80DA63
Checks for missing Authenticode signature.
resource |
---|
056255a29f7366427d92f02fe245cfbd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE