CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
055556dffda4b5a5c7778e6626fb0e40_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
055556dffda4b5a5c7778e6626fb0e40_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
055556dffda4b5a5c7778e6626fb0e40_JaffaCakes118
Size
60KB
MD5
055556dffda4b5a5c7778e6626fb0e40
SHA1
e88763b2b423e33f4190e112d5a5f8d9a229505a
SHA256
7eb68e3ab3e8e9a1735c81acbb4b98733b4ddc514a59bab5e1f421f026790925
SHA512
15bc30aae101ffab6a6ec75f1ce8c9aba6072805371d54c72ee1d517fae0f035704baeaaa00d6ecfb1b02dba862fc5f2706a62a84fcd8d6209eeb76a9e615f8a
SSDEEP
1536:BfQAl+7ovO8kHLdXCT/fWO+je56CWstU8FCTkEsP0H1:dQAl+p8kHBXNO+G6CfU8FSkEsP01
Checks for missing Authenticode signature.
resource |
---|
055556dffda4b5a5c7778e6626fb0e40_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE