CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
04e39a07955cbb2ac6cb9b53f8d761f4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
04e39a07955cbb2ac6cb9b53f8d761f4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
04e39a07955cbb2ac6cb9b53f8d761f4_JaffaCakes118
Size
66KB
MD5
04e39a07955cbb2ac6cb9b53f8d761f4
SHA1
04d1760a428c440a78ca4a62ad68b26e666e7eac
SHA256
6ee6e82a4cd9f4a94f2e20e6e1a2c0a5dd6f9dc54156e1c94ad2667b741c77af
SHA512
74adb219335c678c3a5ec19fddc74216fedd45af8679483ed868622d96b435c800ab6499ebd0f420cbd0d5558659719bd8d22c5cfda7980af3f1bac302c44d52
SSDEEP
1536:BfQAl+7ovO5uMBoFgPMeWvBkGABXJmh+BJ8:dQAl+p0y3kecBkGABG+L8
Checks for missing Authenticode signature.
resource |
---|
04e39a07955cbb2ac6cb9b53f8d761f4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE