CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
95af03f1bef461835a5ba60370096337_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
95af03f1bef461835a5ba60370096337_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
95af03f1bef461835a5ba60370096337_JaffaCakes118
Size
58KB
MD5
95af03f1bef461835a5ba60370096337
SHA1
977b82edfcadf28d972d47fd11281432ef187000
SHA256
ffd227ade7f3e5d3d8524ea3a02916c785d7148252b83af315116f7917df1bef
SHA512
a8fbc0ac60e351e44bd6c348c480ff3c11fa0c60cf899fffe1a966b7bb85822bab044aa2538841f60b44bbf29553e6e4114b1e30fc618f5dec8dd57a88e4e20d
SSDEEP
1536:BfQAl+7ovOITFabllEvpjXQBgSGOKkgvNsptOD:dQAl+p8efEVQfGFDci
Checks for missing Authenticode signature.
resource |
---|
95af03f1bef461835a5ba60370096337_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE