CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
0029b2ea94f1717038b6efe4cd65c185_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0029b2ea94f1717038b6efe4cd65c185_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0029b2ea94f1717038b6efe4cd65c185_JaffaCakes118
Size
55KB
MD5
0029b2ea94f1717038b6efe4cd65c185
SHA1
32c944d6f544f8133d44376d4c254acff6dc8949
SHA256
9efb63533b479c20c574e55ab77ad910377b6dfa189dc44261c10904d89a948c
SHA512
82c2b45fdbd9c73f5ac69f43adc4c21e19b8039b9cfd435bf0138c97819f1b87da000931b7357c3fafd4340ed35ecf812b602bb72047cc430df410f4c29c8daa
SSDEEP
1536:BfQAl+7ovOFqOcngFwOdYIZuUyMieT3G89Szr0QknA:dQAl+pFq0YkuXQF9ErT
Checks for missing Authenticode signature.
resource |
---|
0029b2ea94f1717038b6efe4cd65c185_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE