CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
0502eb3fb7a5eeaf91ff1b779a203419_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0502eb3fb7a5eeaf91ff1b779a203419_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0502eb3fb7a5eeaf91ff1b779a203419_JaffaCakes118
Size
53KB
MD5
0502eb3fb7a5eeaf91ff1b779a203419
SHA1
865fbcbf7b4ca7ef4d417c34e6a55835ce442233
SHA256
6b3c598c4711ea1e3edc85cdf3bc0002f8fe4a0518fb2e156377b87b1541371d
SHA512
6a026aacef89f72a4dfb3c63325b1ca41fabbd266b6e8d2bfb1d92809d7f0b685afbccbbbfd2b6c37bf2e9cda7daaa3b7d8923cdce92a4ba12eb0973979acfa8
SSDEEP
1536:BfQAl+7ovOCF45pPTfamLVKp2w4QciZbB6GHDeBw/:dQAl+pBumL2P4FcB6GjMk
Checks for missing Authenticode signature.
resource |
---|
0502eb3fb7a5eeaf91ff1b779a203419_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE