CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
000661fe886ae0b2158a088d6634f159_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
000661fe886ae0b2158a088d6634f159_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
000661fe886ae0b2158a088d6634f159_JaffaCakes118
Size
72KB
MD5
000661fe886ae0b2158a088d6634f159
SHA1
4f29936d4f93d2ef2a9f9dddfa5f51605f6b187b
SHA256
646d1183e179cc3aff1a6a40da0052dedb5b4405b6fc427435ad17a4db25b8ac
SHA512
1fff9db75d88946628dc64eb436c737caa796698725102be4e1bf97dfc251bc3b157237fcf45807b81e60aa7cd48f74e49118ca4990941414bf4d04a964f3c3e
SSDEEP
1536:BfQAl+7ovOHrzZou8aPDet5uzkvYAno7WTYrHC/0t:dQAl+pJPXDKUeYyoCyHmc
Checks for missing Authenticode signature.
resource |
---|
000661fe886ae0b2158a088d6634f159_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE