CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
0109935a3a9fd2eb6c8186789dc7e561_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0109935a3a9fd2eb6c8186789dc7e561_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0109935a3a9fd2eb6c8186789dc7e561_JaffaCakes118
Size
64KB
MD5
0109935a3a9fd2eb6c8186789dc7e561
SHA1
013b94a7db0f68072113b650be8c071a14c4de16
SHA256
b5ecb5cf0e9ad5ecda367d463043e8bc3e6c2c20442e21f59f3e002c577325ed
SHA512
2c36677a8fed7b57c68cc757dcd82846ee3bfc39bd34a526759e5e80097cbb5e814e6030e076eddacc8cf79c26e2eb4a316ed5a3090ce29dd3f0dd873f408b11
SSDEEP
1536:BfQAl+7ovOwvox9BMjv9zFYeE5C14oY3+kpLrAzdZBLr6T0j3e:dQAl+pwvL45C14+kVrYrry0j3e
Checks for missing Authenticode signature.
resource |
---|
0109935a3a9fd2eb6c8186789dc7e561_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE