CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
04604e85878de98cbb89bd2d71793129_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
04604e85878de98cbb89bd2d71793129_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
04604e85878de98cbb89bd2d71793129_JaffaCakes118
Size
59KB
MD5
04604e85878de98cbb89bd2d71793129
SHA1
d18bc87a646c5d1d0688d0277f22eb3a9d28f9e1
SHA256
a1e5dd8fe2a80ab70a96ffe897646c774eda0da6552183c91e9100358f1f7885
SHA512
74cdd2bbbdcb0e62b086769e7e9eb72fe413430ea4fc1f9b184bd2cea2ebf76322ed7c0423a9acf9ae1796eb425554ae7cb659fade8f715fa464590df57c309a
SSDEEP
1536:BfQAl+7ovO7tMX4snWm+afAr3ZqQpDNVTP0F6:dQAl+phMX1Wm+QoYMhVTcF6
Checks for missing Authenticode signature.
resource |
---|
04604e85878de98cbb89bd2d71793129_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE