CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
00b0b622edd26cc092cbeda1e367a879_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
00b0b622edd26cc092cbeda1e367a879_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
00b0b622edd26cc092cbeda1e367a879_JaffaCakes118
Size
64KB
MD5
00b0b622edd26cc092cbeda1e367a879
SHA1
510d47da7e9b9ba5cb0db1b3b8cbb6b90612b62a
SHA256
ecc4267d5a2b006c9b6f5e957401b806a1971e5c7d9f09ad33f06a3dee3cc0f0
SHA512
aed39e06c198ac0e964194075cd278312b5c71dbb4c5718f7a0a0540a616567e0bde6261b029f1a2181ea8170028bfdec5a587d2f76f7282f9595687444ae902
SSDEEP
1536:BfQAl+7ovO1nab/BHXptZX/f6FUhp0IWpBIK9tY7qIu6Yl:dQAl+p1nab/B3tX/fHhp05pB3tU70
Checks for missing Authenticode signature.
resource |
---|
00b0b622edd26cc092cbeda1e367a879_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE