CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
0369cbcecbc549554d07c1c15013cc01_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0369cbcecbc549554d07c1c15013cc01_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0369cbcecbc549554d07c1c15013cc01_JaffaCakes118
Size
66KB
MD5
0369cbcecbc549554d07c1c15013cc01
SHA1
b240c41527bc7d15e4844ea87ccb6d444f0b784d
SHA256
b933325a39bdf791f7d241c823c8ab9809fff18e2a7e5623bf18f8d7b3583efe
SHA512
7aecaf0259dece8537daa33e73b8103f1fba7ca6ef431dd41e492eea94ff3901343f00976a30c6117f925bb12c235db28b861fae6281d2ee208ec050bb82f94e
SSDEEP
1536:BfQAl+7ovOgeNDxkY5B51lXWYb/p1VXX6I/AGY3tPHDLWBdmF6ubcQp:dQAl+pge0OB51lJ1b/A93tPHfsI6uFp
Checks for missing Authenticode signature.
resource |
---|
0369cbcecbc549554d07c1c15013cc01_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE