CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
05c768aa005533ae6fc0cc881c6993e4_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
05c768aa005533ae6fc0cc881c6993e4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
05c768aa005533ae6fc0cc881c6993e4_JaffaCakes118
Size
54KB
MD5
05c768aa005533ae6fc0cc881c6993e4
SHA1
8ab73de6e9b547f08bc57ce0094edd7ba76e7857
SHA256
ada9ed1ae72447e3551b9c0cbfda8e1a72283e50d550a27d6d7b815feb9dfcb6
SHA512
8759d616c668ab2f8ac31ba6172edfd32156223322ce6800180b33c9d703536a9872fb0eed4656611e58b02d791f1264ad2639126afa701a4abd95ce1e9e8dec
SSDEEP
1536:BfQAl+7ovOuPXEQl1B50qHRGhGpVqucV5:dQAl+pEz1B5HRK5bV5
Checks for missing Authenticode signature.
resource |
---|
05c768aa005533ae6fc0cc881c6993e4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE