CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
01036355a6a0a3df09764b69ffbefb41_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
01036355a6a0a3df09764b69ffbefb41_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
01036355a6a0a3df09764b69ffbefb41_JaffaCakes118
Size
77KB
MD5
01036355a6a0a3df09764b69ffbefb41
SHA1
b18a905ede5ed224df375169bd0f1cc937b95ff1
SHA256
ad0df36977876cfa2289154fae74ef44af201128dc0e7f8459945b8b58e02bf5
SHA512
8ba5bea0c0897c80f5da27750e307df286e7f471380dc334c864d5bd4a22c129ff53a981cb5a0cf32d4a7edf952946819b6450483e30b9a6b1d8bcc61068b886
SSDEEP
1536:BfQAl+7ovOsGX3+UA4tPryKyxFECJ22GN6ouekUgyRtJIvmfmlxwSqS5PSv2imc8:dQAl+ptA4tUFECJ2TO6DtQmfqx6S5PSw
Checks for missing Authenticode signature.
resource |
---|
01036355a6a0a3df09764b69ffbefb41_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE