CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
f4df5b3a20fa12d444fb3b39f094f24f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f4df5b3a20fa12d444fb3b39f094f24f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f4df5b3a20fa12d444fb3b39f094f24f_JaffaCakes118
Size
32KB
MD5
f4df5b3a20fa12d444fb3b39f094f24f
SHA1
188d2e4ab0ef1ddd31999327e1a655fd862c89bb
SHA256
06dc88d4bd35de1abf3cd028c7964e9fd1eaa7f7e1c3a75e18787b137e482c08
SHA512
2e5a40623881266ce86a48f6c58d941472630fbb415df2732a62c3f9b5b343a2899644fbf65e12ac76db90c97a5a035a6c14dfdb35789490501f258a7e6e6822
SSDEEP
768:YxjDQp6DsOfL62l8ovOA7eFSVeAwlZBwd6mFf977Zjgli4xEyP:+fQAl+7ovOYeFSVevyd6Yf979jg84xT
Checks for missing Authenticode signature.
resource |
---|
f4df5b3a20fa12d444fb3b39f094f24f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE