CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
03ba3867ae186285b2121020b420a596_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
03ba3867ae186285b2121020b420a596_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
03ba3867ae186285b2121020b420a596_JaffaCakes118
Size
59KB
MD5
03ba3867ae186285b2121020b420a596
SHA1
c986af646b5ec6135aadb9dd7011e4bfc412d278
SHA256
7287bf4a554040b29264a809061f28c9650ea9a9bed7bf2a1f6d76bcb6723f7c
SHA512
2edcf535276413e1faa6ca7fb73a05e0f89ccdfa7578f2abdf6dd90e6cffc7fbfda44d25c5e8725f21d7bd2ef7005aa42add1b79f6881785ec6a8f4e73605b69
SSDEEP
1536:BfQAl+7ovOhFlcaMogx9ssxEQNCHe2UUrLp:dQAl+phFYxEzHe1sLp
Checks for missing Authenticode signature.
resource |
---|
03ba3867ae186285b2121020b420a596_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE