CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
033adf75024c80c2a1e42760cb4c3ef8_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
033adf75024c80c2a1e42760cb4c3ef8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
033adf75024c80c2a1e42760cb4c3ef8_JaffaCakes118
Size
57KB
MD5
033adf75024c80c2a1e42760cb4c3ef8
SHA1
43f51c7a8a617798b6e20d32e5ad985da96c5af1
SHA256
9b4ab2a17392118d669c2dfbfe2c3f147ff8bffcff0ab5eff469a1d44e50e919
SHA512
a827af8f92e108a974173cbcc8f9895df18d5cb898e3f2b150a038ff217ab060a3f2cc68d2c8af8d4d5f5e6adc049ca3857f9dfca643094deaad63deb5fff95f
SSDEEP
1536:BfQAl+7ovOyYtsV2QqMx9UHlBTqUi+zzVKcXSAwy2lK:dQAl+pysAiHDqrSxKNy8K
Checks for missing Authenticode signature.
resource |
---|
033adf75024c80c2a1e42760cb4c3ef8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE