CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
035856ec62c2b0aaafe9c102ad11c2e3_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
035856ec62c2b0aaafe9c102ad11c2e3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
035856ec62c2b0aaafe9c102ad11c2e3_JaffaCakes118
Size
69KB
MD5
035856ec62c2b0aaafe9c102ad11c2e3
SHA1
ae4490685f6be93d597a32b7163ec93587a269cc
SHA256
a52f5d3d69d61905ed07a47d32f29b2fa5474906663a9c1d3165513dd93d1d4a
SHA512
b086ff7cde201d74c859def2127d142aed956efe94c0d4b6014076e7b07f6cd0df59d08de8c6e745443f380d1b97a5a834cee23f3025d305cd6db8c79e3ab8ab
SSDEEP
1536:BfQAl+7ovOtNdjQ89+CtzTV0eEC07QHOczY1zmaBz8qgKiqTDka0p:dQAl+ptNQCtqel07SY1yQ8qcqTDQp
Checks for missing Authenticode signature.
resource |
---|
035856ec62c2b0aaafe9c102ad11c2e3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE