CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
0b685c1576542dad2a5e28de68c96d1e_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0b685c1576542dad2a5e28de68c96d1e_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0b685c1576542dad2a5e28de68c96d1e_JaffaCakes118
Size
60KB
MD5
0b685c1576542dad2a5e28de68c96d1e
SHA1
0fa71dc93e15d0a8cf6ce270395bfbfe0b324c93
SHA256
4b731a30faa99ccb27328e6c0e4e95cfe5c4c688b554f201e47a6b397edb2a09
SHA512
5e3cf9387858aab79932d86b4f48b2b83d8dc2584430582d83bb88bc5901eeca11f45da77afa5de39b2d1e3bbab261c8d07875174593d2898444128e73b15954
SSDEEP
1536:BfQAl+7ovOzGKq1xjUB5ojuqPynmri7rUQpTKHAd:dQAl+pzGvgeuqKnme7rzpZ
Checks for missing Authenticode signature.
resource |
---|
0b685c1576542dad2a5e28de68c96d1e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE