CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
0083c591a91fd1722ac6ad076908b31e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0083c591a91fd1722ac6ad076908b31e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0083c591a91fd1722ac6ad076908b31e_JaffaCakes118
Size
65KB
MD5
0083c591a91fd1722ac6ad076908b31e
SHA1
61a2167c385286edfd7114b3c1cbf56523c85fe3
SHA256
add75845b8128a0c9aec24ed0dc4a65cc92ad40678c8f766f3af07873de8fb82
SHA512
3d8d1c810528f1a73f6c6c909da12f9d71fb6204ee1e7879f4c42fb4823bb9250e385d504d4d881cb49e66d407cc90a6abe33e2a4c319af9891f68a2fb77e6d2
SSDEEP
1536:BfQAl+7ovOrnYk1aXdlOFvxCxflEZ23/zx1OejvEk:dQAl+p711K0Fcx33rxXZ
Checks for missing Authenticode signature.
resource |
---|
0083c591a91fd1722ac6ad076908b31e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE