CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
6088214896f760ab6fe1f647a74a34c2_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6088214896f760ab6fe1f647a74a34c2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6088214896f760ab6fe1f647a74a34c2_JaffaCakes118
Size
68KB
MD5
6088214896f760ab6fe1f647a74a34c2
SHA1
2d9086910d263a59ac876bbd017dfbcdb88c2e88
SHA256
731658006004802bccff9775eaa66404a1fdecb85c7ba5f07b2de2800e69ddce
SHA512
69d6826c5461c8458e4c60e7a34e79711aaa91b55830a74dba7de9174a06a9d79dcbafafa95ef58040fd165264539ddd62f53d38719ebbad00d75456883aef81
SSDEEP
1536:dfQAl+7ovOOtdOdoUNyZLyCSqqZ9xG/yL2P9Y5Ts2aG:5QAl+p5qUNI0qqZ9x6yKY5TTn
Checks for missing Authenticode signature.
resource |
---|
6088214896f760ab6fe1f647a74a34c2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE