CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
00cec5eaa2c87cdbf6c115669fd36b78_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
00cec5eaa2c87cdbf6c115669fd36b78_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
00cec5eaa2c87cdbf6c115669fd36b78_JaffaCakes118
Size
72KB
MD5
00cec5eaa2c87cdbf6c115669fd36b78
SHA1
04fe234ca2b8178f389c0c16b019fd4cc590d24e
SHA256
bd32b3f623f779c4d81dd4e9ba70987c759bd21c002462af926d295068a43ae8
SHA512
c066832afaab4649836dbec0f2d1244622794e7fc79e4c800e52d80c05155b5026670e6106de75fec319a1e9a4c41180b67fe6bca4cca6a647622950e5edc0fa
SSDEEP
1536:BfQAl+7ovOtYRkrBHHjGmE9zvllMQFEpjb+iUhiI86go13BFCairuV72GC3Gj8:dQAl+ptYRkJG9tvllWjbV+tgmBFouV7k
Checks for missing Authenticode signature.
resource |
---|
00cec5eaa2c87cdbf6c115669fd36b78_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE