CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
d4ff8034b7188d40784fffab6f803536_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4ff8034b7188d40784fffab6f803536_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d4ff8034b7188d40784fffab6f803536_JaffaCakes118
Size
43KB
MD5
d4ff8034b7188d40784fffab6f803536
SHA1
122b18960054deb927822c8833d30bfc99964467
SHA256
2d99ebaa3c55fc8ba3f8ed34faf725cd6006d100fdc4e714814b88fd63ff932f
SHA512
225309a6e0cbed63508f74a500440e4ed964c3fd2f0f11b9853fce47aa54e35f1f933633a6eef03cf5e6cfccaa2ae80b3a3cb3a05d15b4ca780e70df825faede
SSDEEP
768:XxjDQp6DsOfL62l8ovOH/JsaHoPALabm6gT/NrtgzjvCkCnDZG03ZX4xJUor8oaz:BfQAl+7ovOfJswomrOngNpwUE8oGR0da
Checks for missing Authenticode signature.
resource |
---|
d4ff8034b7188d40784fffab6f803536_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE