CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
0411150daa3cae8ba239a493fc7eaffa_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0411150daa3cae8ba239a493fc7eaffa_JaffaCakes118.dll
Resource
win10v2004-20240910-en
Target
0411150daa3cae8ba239a493fc7eaffa_JaffaCakes118
Size
68KB
MD5
0411150daa3cae8ba239a493fc7eaffa
SHA1
3c0af6ead07d3acfef94ada59182bbde3a68db26
SHA256
a28629c67b958d79aa60ff3df80c3dbf4e9c8a4c7a34e180010390fab8de9d81
SHA512
d5f8891ee207e572766490322af67151a4e35a9718f48924b724e62847112378dda91d8e07649cd6d3f28b43d4a2b682f3ced8a12132d24b91871c14c35c2461
SSDEEP
1536:BfQAl+7ovO6oXlO78Q4OZhoMg08p0whdMpxeMEN52onTRgi4Fp:dQAl+pnXkYQreMg08pr2QN52oT4Fp
Checks for missing Authenticode signature.
resource |
---|
0411150daa3cae8ba239a493fc7eaffa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE