CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
b0886ae39df2b823545f06b0ed804bf6_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b0886ae39df2b823545f06b0ed804bf6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b0886ae39df2b823545f06b0ed804bf6_JaffaCakes118
Size
68KB
MD5
b0886ae39df2b823545f06b0ed804bf6
SHA1
2fa2fea275ff9a291243803200e885259cc73c7c
SHA256
3c8ab903c7d3f5f131f13ed6400877a2f2c91351c0de2673fe78e4216703c627
SHA512
a488f75cdc2757fe4d0319fe89fdb2f39a6b88870d992c48fed664917e03cb10737756db8fd5c6c86bb96eff4ef516e6811913c9c478ecc15d372a852be43f42
SSDEEP
1536:+fQAl+7ovOFb0niRG0GsOi/8uBVNNcTbz4B+XCjAT1q/NC14dzB:aQAl+pY7hRurNN3B6CGq/N6mV
Checks for missing Authenticode signature.
resource |
---|
b0886ae39df2b823545f06b0ed804bf6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE