CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
011f2c8fbc3cfdca479451c3f7b12c45_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
011f2c8fbc3cfdca479451c3f7b12c45_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
011f2c8fbc3cfdca479451c3f7b12c45_JaffaCakes118
Size
56KB
MD5
011f2c8fbc3cfdca479451c3f7b12c45
SHA1
e7bfbe79e3d50916b9caa6f191f2f8ca03169317
SHA256
b417a7559c97cfa2d28dd6db85d669018592c5142604aef5fcb8d305c73f18c4
SHA512
ddc6d25c29afabc90efad0af25042b91269c3ff2da2feae92145e245723bb40fcbadbcd1705050d422ec6ccad48a34070cdb21e6c7cdab9493f8f5e0960290ce
SSDEEP
1536:BfQAl+7ovOQVAldNSjCiIfYiervdstT7R+gg3:dQAl+pQVAldQGiIFT7kgg3
Checks for missing Authenticode signature.
resource |
---|
011f2c8fbc3cfdca479451c3f7b12c45_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE