CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
034aa84054bd9d7005f80e96151c4389_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
034aa84054bd9d7005f80e96151c4389_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
034aa84054bd9d7005f80e96151c4389_JaffaCakes118
Size
68KB
MD5
034aa84054bd9d7005f80e96151c4389
SHA1
fb462775e0f26d5221a2ce09504ac2ca513a28a4
SHA256
9c9067b7cefd75a69dfee5f4f1c276c27747584d5a9feed36b035841b78021fe
SHA512
877bd7fff93d7438e52672a1fdbbf111bfd21e7bdc98d5b3bcced036dcde798cc0ea4c9b270c2714ec5ef3bc367d5bbc2440fee41cf2590f6b0316d64bb46727
SSDEEP
1536:BfQAl+7ovOn86JB+P+WwInYIiCb03YN54DcbgbNgRymQKl5CH+G:dQAl+pzB+RnYIiCb03o54AM5tsCH+G
Checks for missing Authenticode signature.
resource |
---|
034aa84054bd9d7005f80e96151c4389_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE