CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
040f48dd7fd4ba30975677536c3dc3ce_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
040f48dd7fd4ba30975677536c3dc3ce_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
040f48dd7fd4ba30975677536c3dc3ce_JaffaCakes118
Size
63KB
MD5
040f48dd7fd4ba30975677536c3dc3ce
SHA1
5badd43a92e6de29f5cd0ba089f23a34162c0ae4
SHA256
6971bd0ad6f12a27217cd622722c4b0ef30fa6dd98255239f9613125287ce85b
SHA512
c5334474ce4c44351f89e6e2ffff3e53a5637e167767e1ee27a00a033961f0942b6e7a472fe7272ebe62aeeb95b33cb152c6b71795db781245d6bf15bb536749
SSDEEP
1536:BfQAl+7ovOtPALcS7waDKrAN3Xgsh+TRyvPYBpcqxWEaBGM+zpFp:dQAl+ptPAA0DKcn21VaYp
Checks for missing Authenticode signature.
resource |
---|
040f48dd7fd4ba30975677536c3dc3ce_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE