CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
04c289bffd0a4bc6e4983e5e17f03e75_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04c289bffd0a4bc6e4983e5e17f03e75_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
04c289bffd0a4bc6e4983e5e17f03e75_JaffaCakes118
Size
64KB
MD5
04c289bffd0a4bc6e4983e5e17f03e75
SHA1
2705c52221dceef2df216fb2a53ec090ea382789
SHA256
78198c5b0f9ee3ff97740792a70d0463a60d15b08f68f44ed3c100017955065e
SHA512
8014433921438a38dc57ebc5b49d23fb87fae64254a6668af50b6b059336241f8a161632ffd8d8d2771e641e063a938155a492897679deb0861b95548b495c27
SSDEEP
1536:BfQAl+7ovOlqQbP/61rTqIiTRu6ts5rODbG9RFJo:dQAl+pMiq1HSruwSRvo
Checks for missing Authenticode signature.
resource |
---|
04c289bffd0a4bc6e4983e5e17f03e75_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE