CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
009174610752b886a7436d2f32835ec5_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
009174610752b886a7436d2f32835ec5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
009174610752b886a7436d2f32835ec5_JaffaCakes118
Size
69KB
MD5
009174610752b886a7436d2f32835ec5
SHA1
1c4d8b37743213c5be89efd7c08f2f67219d654d
SHA256
f67b0ca7b4fca6561732a6d0d5558f05aa3fe41902f0ebdf014d53d61fcab457
SHA512
ab97eb5f392da0a9839a09451d5faa696e3d92e79ffa1eafc7c917711f93a544fc3094f7808dec4fee2aa1b6190d72514d91924272a633ef640f8dfc2e75410a
SSDEEP
1536:BfQAl+7ovOE8TCSwCT0DucabTVA6+nYmIjxlQCC463NcC:dQAl+paKPz+Yrjxlc4sNcC
Checks for missing Authenticode signature.
resource |
---|
009174610752b886a7436d2f32835ec5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE