CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
001969eb9606177f500ec849954e22eb_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
001969eb9606177f500ec849954e22eb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
001969eb9606177f500ec849954e22eb_JaffaCakes118
Size
61KB
MD5
001969eb9606177f500ec849954e22eb
SHA1
70f8b61f5c11f60390027ad1d2ad6bf829b9ccc9
SHA256
7fe0ed2bad485855f9b8c6e84c40ba0515ef68b2278a0889b477280fac3e74c9
SHA512
ebeb7b2b1bccf419b940b22dfdf02db82bbef6fda3dcd7e31ecd0f630527cb8e3e8d45976e2eaff15637deb15fcbced6e98cb5f1e2356e245c2da1e7df53135b
SSDEEP
1536:BfQAl+7ovOC+TVyPD3LrHQOAEqApO3zoEz+E/FCM1r3e:dQAl+pC6VyL7zvlpA1+ENCM1r3e
Checks for missing Authenticode signature.
resource |
---|
001969eb9606177f500ec849954e22eb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE