CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
66de860372fcc00f35cf131c84f6db0a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
66de860372fcc00f35cf131c84f6db0a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
66de860372fcc00f35cf131c84f6db0a_JaffaCakes118
Size
60KB
MD5
66de860372fcc00f35cf131c84f6db0a
SHA1
c96ef25ce07071643342c69820b8a1f89683ef56
SHA256
1c056feb94b6f4131fbabf10bb40282bde987e9915bd72e6a0ee2ddecd508894
SHA512
6dc83e88e7cf0cf0fe1cb4239b86537cd55db94bd838af107f002d82874b2ee5c290c5602bf3a74b0bf17406282ece0a8aaa85fe7e5e1e21618b8a9164c0078b
SSDEEP
1536:+fQAl+7ovO56L5OzhdKvWXddKYd65UnDOm:aQAl+p56L5Ozhdg8g5m
Checks for missing Authenticode signature.
resource |
---|
66de860372fcc00f35cf131c84f6db0a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE