CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
d03c69eaccfc0ac604fba5e3eb829a99_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d03c69eaccfc0ac604fba5e3eb829a99_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d03c69eaccfc0ac604fba5e3eb829a99_JaffaCakes118
Size
65KB
MD5
d03c69eaccfc0ac604fba5e3eb829a99
SHA1
7afd387ba013ac64bd7fdcc4d852b9f64c2784fe
SHA256
2cfd241986072875a5ba5a64547cae48e5ec57f6dacf76a94f3884880addc804
SHA512
7ef08ac9b46f0a1f9d57e1affe37fc297b17fc5eb818090de7582c3e86739834b9a7fa2265728705c54fa38cc14e4af2b0c5c6f8ecb506889a73abeb2af78e98
SSDEEP
1536:+fQAl+7ovO6A0vf8OY8XfYlkGnW+RyrlxH39EqHdqpQMYb:aQAl+p6llXfmnWDduqHCQz
Checks for missing Authenticode signature.
resource |
---|
d03c69eaccfc0ac604fba5e3eb829a99_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE