CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
071f059ee7177b2f839b7badef453b03_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
071f059ee7177b2f839b7badef453b03_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
071f059ee7177b2f839b7badef453b03_JaffaCakes118
Size
66KB
MD5
071f059ee7177b2f839b7badef453b03
SHA1
875d95e9f8f4cf6a03ff491302e5af5935d05d54
SHA256
89faab01ce2f1a1964c288925993e4ef27bfbc7e50841d4340b88632ca5a6b1b
SHA512
432f7d30e81e901d79fffd4c15a85b4bba37ac993eaa1fafcdff26ad2a671a318f85dc4500f752202a359ce5cf2ea22825777281fc73fa036a598ea421bbdace
SSDEEP
1536:BfQAl+7ovOSnCnjg2PSdcvaTLHFisCrODYF/y/RqqzgtvgQC:dQAl+pKCnDPqxjwcQqpYdgQC
Checks for missing Authenticode signature.
resource |
---|
071f059ee7177b2f839b7badef453b03_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE