CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
03ae26ae6611824e62611464f1875f8d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
03ae26ae6611824e62611464f1875f8d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
03ae26ae6611824e62611464f1875f8d_JaffaCakes118
Size
64KB
MD5
03ae26ae6611824e62611464f1875f8d
SHA1
aa801a11d1a2c432a5a79a686f97acf8cd656e54
SHA256
a5b53be996c2dd5dc984b0dadd09e67eb2aff81997e6457f8f3738df52a81e66
SHA512
aef8f82792d6385adaa050897cfa37968aab25dfadeb2ac846ada3f9591c8b5571712122f5247f0b7bdfbe0aafe34d5c96ed0efb145ef5032cfc08697ae15d6d
SSDEEP
1536:BfQAl+7ovOZGMvJGbxmFqjIhdV19qFplBX:dQAl+pZGA4xmFqjodV1q
Checks for missing Authenticode signature.
resource |
---|
03ae26ae6611824e62611464f1875f8d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE