CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
045a718194854210a62448f454956460_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
045a718194854210a62448f454956460_JaffaCakes118.dll
Resource
win10v2004-20240910-en
Target
045a718194854210a62448f454956460_JaffaCakes118
Size
52KB
MD5
045a718194854210a62448f454956460
SHA1
f9ee22aa84baaf42765124bb0fe4f8062317287e
SHA256
ad2a8ce4e2bbee5a3a72486fdf42f095230efabb2fc8b886fbd6dd1a776dcb60
SHA512
c52382f2be7951e41c96be83bf57329b194caf5b413007514915a4d9980fd7384fe42ff3692783bddd91cad2f1c6a97390b462e3630f40b98c4999d3390d6839
SSDEEP
1536:BfQAl+7ovOG5GpACMiLSc0AsFLhzKenke+0Dp:dQAl+pGLUX0AsFLFKenkeZDp
Checks for missing Authenticode signature.
resource |
---|
045a718194854210a62448f454956460_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE