CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
00064ca785b1986558207c2b769d9224_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
00064ca785b1986558207c2b769d9224_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
00064ca785b1986558207c2b769d9224_JaffaCakes118
Size
60KB
MD5
00064ca785b1986558207c2b769d9224
SHA1
3f519d7559b6b979d5751ffcd5b55ad5ced2f237
SHA256
ab6fb8b2f8987fc4935016664bac945acaa8b80e70f29661f5237014365f12d2
SHA512
7e3d8f583df774370aa0c919107f6e6ee9a94d105cdecc865ac8b0307c745849239f7d7e7c511a5467b199b3e64ff296cb3680de7fe6fd05a94ade9ee1c913af
SSDEEP
1536:BfQAl+7ovOtJxW7qcQ2NIIDnyJpF0mmVqV6QCC33Q6:dQAl+pt/W7qcQ2N5nyp3WqV61mh
Checks for missing Authenticode signature.
resource |
---|
00064ca785b1986558207c2b769d9224_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE