CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
730bae7ea921703793300b09e2c616bb_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
730bae7ea921703793300b09e2c616bb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
730bae7ea921703793300b09e2c616bb_JaffaCakes118
Size
63KB
MD5
730bae7ea921703793300b09e2c616bb
SHA1
e1575731b1232f204f4af3faba0bc6d0d6b3b8f2
SHA256
99b0ac25d2cff7149c6a34a7b1ec20abe5d03427778ff09313730072c5201ded
SHA512
62bada572feee3b94b15dc2a83a1fdfc8e12bd8e886c8e9468532beb81b7d1d8bfcb6f21b481b0dfd986ca76b871ac35cf9b5097adb0555b27dd7ffb692d3217
SSDEEP
1536:+fQAl+7ovOUtulMXClNrkKWgV2K/qDCn+YE+gi7:aQAl+p4EMIrkKhQiqDCE+g0
Checks for missing Authenticode signature.
resource |
---|
730bae7ea921703793300b09e2c616bb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE