CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
04bd6033af6b659acccc2fff07651c03_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
04bd6033af6b659acccc2fff07651c03_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
04bd6033af6b659acccc2fff07651c03_JaffaCakes118
Size
50KB
MD5
04bd6033af6b659acccc2fff07651c03
SHA1
b7edd44191f7be61b001d76cacab87f7f5179508
SHA256
a09c98137247604d3e64e1839983d4aebb2d3517e069a8239a6cd57e87002336
SHA512
699b0846b9b05032e459a56918e3643167b62db6a5dcfff4e7bf2e12ec373a234e09102183cefa925fe0967b213238be42035302ef4001b3e4cff2ce0572d1f6
SSDEEP
768:XxjDQp6DsOfL62l8ovOicp/EdNtkQPHovO3M85EzXoCTTuh2hrgNkHp:BfQAl+7ovOdp/MXa2M4EzZTT42Qup
Checks for missing Authenticode signature.
resource |
---|
04bd6033af6b659acccc2fff07651c03_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE