CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
0400bd082146aca67ca9de2b8934ca15_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0400bd082146aca67ca9de2b8934ca15_JaffaCakes118.dll
Resource
win10v2004-20240910-en
Target
0400bd082146aca67ca9de2b8934ca15_JaffaCakes118
Size
57KB
MD5
0400bd082146aca67ca9de2b8934ca15
SHA1
a4118f8942b6127ed63e722545a3268d8020e105
SHA256
62fefb39ef21ff2fce5a408f11e3c5ecb9a072e35e2839af38db982ca332d885
SHA512
dfdca89bb2d483ac5da37ea97376f1a3d811ee8569250d2e07e8f9e63fa00f437dfd772e32835aaab25743c7900007bed771a18a3490343664a74d19d240c68b
SSDEEP
1536:BfQAl+7ovOzz9MC6MvjB1wsMm6MGksr4+FM:dQAl+pzZzV1oMGksr4+FM
Checks for missing Authenticode signature.
resource |
---|
0400bd082146aca67ca9de2b8934ca15_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE