CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
03db48bbf3e7a4bc7dbec08276c0b07a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
03db48bbf3e7a4bc7dbec08276c0b07a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
03db48bbf3e7a4bc7dbec08276c0b07a_JaffaCakes118
Size
65KB
MD5
03db48bbf3e7a4bc7dbec08276c0b07a
SHA1
8750bec1ae3dc0a58637714d32b13af9dbbce3b3
SHA256
a0de7a84cebc0468f35d46a6352d325042892190a5f7fbc6767cfec3071f42b7
SHA512
289928abe099bcfbb7abcbd6e83b65f83b6804739f3bbbe0ad54d076a6a5d61c40ef4dc28243c8cdc225cb7217f6924be2ea02fe57ea2dfb2fde70d609a78b4f
SSDEEP
1536:BfQAl+7ovOH9e/QW12JTktjOg5jl6Y1oS1f8e1C:dQAl+pHQ12JktHn6Y191EeU
Checks for missing Authenticode signature.
resource |
---|
03db48bbf3e7a4bc7dbec08276c0b07a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE