CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
007cc713ab97f867d26e8ba437236114_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
007cc713ab97f867d26e8ba437236114_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
007cc713ab97f867d26e8ba437236114_JaffaCakes118
Size
78KB
MD5
007cc713ab97f867d26e8ba437236114
SHA1
4ff71416007baf98ae0d01c800780d763d721feb
SHA256
bc296510f298db3f883aaf209a26f1628c9f1eae158c4178319b6fe6c9c8affc
SHA512
407439674b7826fa8356efe5ea1aa63e544c01150f00da15b1ca1ba854fc32de8de0086715eec399578f2d00a4499cd84da9da36793f00a171b9cbfd7ab1e835
SSDEEP
1536:BfQAl+7ovOohiZQ80iOBYq3DYeqoKdperxtpHWK2:dQAl+pHouq3Ue+perxtpHT2
Checks for missing Authenticode signature.
resource |
---|
007cc713ab97f867d26e8ba437236114_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE