CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
039f5dc194ec70b41cab24ddf15046c4_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
039f5dc194ec70b41cab24ddf15046c4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
039f5dc194ec70b41cab24ddf15046c4_JaffaCakes118
Size
71KB
MD5
039f5dc194ec70b41cab24ddf15046c4
SHA1
5237d4d693737fd223e025651c92f8e0d0caf4d9
SHA256
a0ec256a6b8ccdc109d78befd1255de92debf000349735967bb55c24a309f6fa
SHA512
2d5f6528b4286503ee7a28c9bd781fb91a2e5c2307301ae7dbb5e66abc778a0e4a836ce70a3f2a0f994de67fc918e50959c8a7b52a89f37f95df43ade59216d1
SSDEEP
1536:BfQAl+7ovOYNPHHi0W3SL8N8bSlxIh70N6YI/pvZcdWWNug:dQAl+pYNPHHpWPNASlx67I6YI/KNx
Checks for missing Authenticode signature.
resource |
---|
039f5dc194ec70b41cab24ddf15046c4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE