CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
c839dfec93103279259bf6ba3e2fb970_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c839dfec93103279259bf6ba3e2fb970_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c839dfec93103279259bf6ba3e2fb970_JaffaCakes118
Size
49KB
MD5
c839dfec93103279259bf6ba3e2fb970
SHA1
dc177555e77979a18ce1efca1bbb084ce87187e3
SHA256
0ec0564f9979043989ba6567f781f0f83effeeaed122bdafe660a2da14c78053
SHA512
5cae1bc8079115c09128e1b109f2b0886203ae9bc09a26a82fee6399bbc7d84d959a3392397e2fcffd6f44f1c00902c410ddebaa284655864f92111ff4db1d0a
SSDEEP
1536:BfQAl+7ovOh0nzVM0z/MCkEHBkZkidTUeMVLHtN8:dQAl+pKzkCk6AdTUTVTtS
Checks for missing Authenticode signature.
resource |
---|
c839dfec93103279259bf6ba3e2fb970_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE