CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
04f018e84f0eb538cd0b9aad6120a8d1_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04f018e84f0eb538cd0b9aad6120a8d1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
04f018e84f0eb538cd0b9aad6120a8d1_JaffaCakes118
Size
56KB
MD5
04f018e84f0eb538cd0b9aad6120a8d1
SHA1
c3e3987e05a0c6d150ed628376c87f3bccaecd9b
SHA256
bcb6551551438cd9d85d17847ec27307b5053867222d603865e3c8ab1582659d
SHA512
ce324947c8daa40b0a259b2f25ad789662851ab02822784a23e3884459a5525d1a46b2e40de46c6a98c96a8c069856ffe8d74334511a09dea17ab174646c9200
SSDEEP
1536:BfQAl+7ovOjnhdlTio/PucjIwBZJIjMNTQj:dQAl+p1dlGouyVS
Checks for missing Authenticode signature.
resource |
---|
04f018e84f0eb538cd0b9aad6120a8d1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE