CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
05a04c4b67a26e333e7e61b02106a195_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
05a04c4b67a26e333e7e61b02106a195_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
05a04c4b67a26e333e7e61b02106a195_JaffaCakes118
Size
60KB
MD5
05a04c4b67a26e333e7e61b02106a195
SHA1
cb533d09089367e1c4a5611fe72d724d68aa2f18
SHA256
aef56b43ac7c186aba573b2a7bea9d29913dee7e28b06634924bdb4c989a5e67
SHA512
9b01167791af8e6c44f74b7c1075606efe31088ee950533a194683ba6e17c8f561e3196bc7f86a941a9353b92f5692166470a4f1b214030641d237d97b0f4966
SSDEEP
1536:BfQAl+7ovOBmPWvSe523WDx3HAgBuuOAgyImMvNnftIZtnMOp:dQAl+pB4tmDN9B3ImsNn0+Op
Checks for missing Authenticode signature.
resource |
---|
05a04c4b67a26e333e7e61b02106a195_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE