CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
1a5c25d826d0daf7f1590f9fa9f6596e_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a5c25d826d0daf7f1590f9fa9f6596e_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1a5c25d826d0daf7f1590f9fa9f6596e_JaffaCakes118
Size
73KB
MD5
1a5c25d826d0daf7f1590f9fa9f6596e
SHA1
30c1c1bfe5c97746921cdef82bbab6b9d57b46c6
SHA256
10b64ec068b4b1fe4d6e4bed0a210514e176a9f682ab629e2dded2446e9ae917
SHA512
1c8f4cfa7763c7f5bcf8421299a81bedf293591d030a7d8eb16ef6abbd79af5d80663ad0b5a40c741739953e3ddd18c785b6d290916e0ac40af547ccab6f521a
SSDEEP
1536:+fQAl+7ovOQ6Wke14LGCkZbqdg0UvKwANUh1hbowkuQmhnwvJK9Kr0X:aQAl+pQdkECmR0UC8hLbYuQmwRmKq
Checks for missing Authenticode signature.
resource |
---|
1a5c25d826d0daf7f1590f9fa9f6596e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE