CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
4548d6623fb6601beeee9308857c775a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4548d6623fb6601beeee9308857c775a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4548d6623fb6601beeee9308857c775a_JaffaCakes118
Size
45KB
MD5
4548d6623fb6601beeee9308857c775a
SHA1
eb72bd90f9ace4aceedb9858fff29f32e7ef060c
SHA256
64455a429fda155ddaf22873b738f92e13f4fbaa37c49fa7df32986f1b744fd5
SHA512
bd265992e0f950c99af3d3b11b5dcd7c3e83976613fb870ec481284153ef2bf2cdddd5dcf3b223df63dcb4a49c6bbcb3b39165ed05eac07e8ed166daf26932d4
SSDEEP
768:XxjDQp6DsOfL62l8ovO1cMPiYx88FEf4w2UdxO53a52kWU1zTPatEBBZnoPfFk:BfQAl+7ovO1ft8LRPzWO3aipok
Checks for missing Authenticode signature.
resource |
---|
4548d6623fb6601beeee9308857c775a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE