CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
00e71d5affff6de0ad435c92d976d037_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
00e71d5affff6de0ad435c92d976d037_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
00e71d5affff6de0ad435c92d976d037_JaffaCakes118
Size
46KB
MD5
00e71d5affff6de0ad435c92d976d037
SHA1
74ef337dbf644873e628620fad94963f514a6159
SHA256
f826e823172400f65d4dad410dddfc7302091ef2f9843a2e61e14d7e5c677976
SHA512
fc2d3b05881b9d6e290565d6565ac65f8f354c3bac464a8f7db9b53a67cc492a960baea3d2857d8499cfb6f1cf42a9f1eadf94856f4e033db05e93522a549341
SSDEEP
768:XxjDQp6DsOfL62l8ovOEKkSWnV4p/JKqPlbE5XWYGS+DzpzEp4uHXlg64w3Fk1iR:BfQAl+7ovOlkVV4jEMYGS+D5ELlg6tek
Checks for missing Authenticode signature.
resource |
---|
00e71d5affff6de0ad435c92d976d037_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE