CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
07110876abfbc887735faaf5f062b48a_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
07110876abfbc887735faaf5f062b48a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
07110876abfbc887735faaf5f062b48a_JaffaCakes118
Size
58KB
MD5
07110876abfbc887735faaf5f062b48a
SHA1
79e652dc4488751d2a0f3f95825fb6664140b863
SHA256
f201925ad1154883c22422ab0d6a5f2347f63a343c9f4d107a7be743599417e9
SHA512
62d3fccc5e7758384381b6d453271a71287d2bdf9ed5d53675b925f6525d9cf7f3429f1bb40f4b68e070f8938838d225b5d86dc199ecdc2fa5d4d48ca9443848
SSDEEP
1536:BfQAl+7ovOcbsrs/syaFoNTTbL/OCPZ421vxWPV:dQAl+pcbF0oZXzOCoPV
Checks for missing Authenticode signature.
resource |
---|
07110876abfbc887735faaf5f062b48a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE