CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
16162857a82b06b05bef4af7189b33d2_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
16162857a82b06b05bef4af7189b33d2_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
16162857a82b06b05bef4af7189b33d2_JaffaCakes118
Size
63KB
MD5
16162857a82b06b05bef4af7189b33d2
SHA1
8bd5176b687ffb7a923a065dd47c30db74adb181
SHA256
06937bd852a881714b6f49f4fe92f86769282054b239b0144ac5cf055964a1d6
SHA512
b2d2bba0e49cf4172c3955c13843a9fba7fcd7d610aa4e65bdde9eba8902f27c0c907a38a1fb6cb4cfe27d1f378ed7eb6cee94ea0a0ac22b9abf666235058718
SSDEEP
1536:BfQAl+7ovO4KH1wglEhGfyoGYGiHoKGvtE/nDYcUXb9ZOg2:dQAl+p4KSg3FJJDGa/DYcUXbyv
Checks for missing Authenticode signature.
resource |
---|
16162857a82b06b05bef4af7189b33d2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE