CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
05cbb58e4c61663489d71aa6a2e76bc6_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
05cbb58e4c61663489d71aa6a2e76bc6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
05cbb58e4c61663489d71aa6a2e76bc6_JaffaCakes118
Size
53KB
MD5
05cbb58e4c61663489d71aa6a2e76bc6
SHA1
1f2b4cdbd56edd140372bc9e29d3f760dbd35bab
SHA256
7718b07645cf56ee6384ee48b7aa8922f7066faec703266ab92339a7bfa024be
SHA512
924f77840fd0b34fedb167559988c8dd4f98beca34f22e4d45679975f25256b44106a0bf85fdfb34066ca2f17849b063ecc72a096d5180c9657d10a63307752a
SSDEEP
1536:BfQAl+7ovOXQZntmWRYMQgtDw69WrtHVHqEznJs:dQAl+pAZnglMQgtc3HZps
Checks for missing Authenticode signature.
resource |
---|
05cbb58e4c61663489d71aa6a2e76bc6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE