CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
1bfbc3d2c102e9f795cfce19a12e72b7_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1bfbc3d2c102e9f795cfce19a12e72b7_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1bfbc3d2c102e9f795cfce19a12e72b7_JaffaCakes118
Size
60KB
MD5
1bfbc3d2c102e9f795cfce19a12e72b7
SHA1
49d2ed3ca2d9af9518049be298ea1a2dd34d7e00
SHA256
0e21911e0a175dbee31caf216134eb7b7cc272068532e90b1474b718b5cc1cd1
SHA512
0e371229a1020a4889cd86f37746c56aa78dc909d1f1a02587215b12ffea0ce631f105e813f9569d7ad31416d51a93e360c4dcb46a46d81c56ff92300634f039
SSDEEP
1536:BfQAl+7ovO3y0DJb88Io0rYcKiRLa6ee0K5QGudmH1UC+PdGyHqzcR:dQAl+p35DJb8ToKYcHRIahMC+lZHqYR
Checks for missing Authenticode signature.
resource |
---|
1bfbc3d2c102e9f795cfce19a12e72b7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE