CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
0548edd898b01e84a55839299392302f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0548edd898b01e84a55839299392302f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0548edd898b01e84a55839299392302f_JaffaCakes118
Size
61KB
MD5
0548edd898b01e84a55839299392302f
SHA1
ec95f01f3633b337a277bb95cb6bd70ac159cd32
SHA256
9ecdcf32920dbd88edd1e5356ff30b9c014963d1ff773a5e23ea434f94dcee9a
SHA512
9c0d3135254b4d9b2f2b2415d8be64713c02f10f4945c2a9ab04c4c3d3c1f68caf377d2f10bba758ef8a72df42a0e6e21a0b5a699ac9de4d0393d9dd13f576a5
SSDEEP
1536:BfQAl+7ovObWr54UzLrVVQR8fvLpZYACnoZtlV5t:dQAl+pbWr5vPrViRyvLpQoZtlTt
Checks for missing Authenticode signature.
resource |
---|
0548edd898b01e84a55839299392302f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE