CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
6a74e58d985afd1b5d7d845412c9b055_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6a74e58d985afd1b5d7d845412c9b055_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6a74e58d985afd1b5d7d845412c9b055_JaffaCakes118
Size
67KB
MD5
6a74e58d985afd1b5d7d845412c9b055
SHA1
b3903f8e99272b6601558c837cc9d3cd34f83f45
SHA256
b50f791882e9232425f9d48c1afb25b14ee716138942c7cf2796358e5deef49a
SHA512
cb50f5b1d9ffe205eabe3e62259c1d96b8b2596062d3b111a5bd2276007df0b03effcf3349c4cbdb08d00956d39c9ca6b7183e4f778f37a318cbfb0f0906e499
SSDEEP
1536:BfQAl+7ovOm7jN37ozJBPUry4o5sgQE1b9fs25l0q9ug47Z6:dQAl+pmIU2F+Ow25Sgug4l6
Checks for missing Authenticode signature.
resource |
---|
6a74e58d985afd1b5d7d845412c9b055_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE