CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
05f34d0128333f5899c376ed2ceabb39_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
05f34d0128333f5899c376ed2ceabb39_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
05f34d0128333f5899c376ed2ceabb39_JaffaCakes118
Size
63KB
MD5
05f34d0128333f5899c376ed2ceabb39
SHA1
483ff03f0760a962ab86ec25917ed78bb27c586a
SHA256
ae8188fe5b75bb1ca2e9e1d473205400c7b14ad3249b032686b822fc52bc82e9
SHA512
5abb5f9589b6213001e03e200540f8fb360ddd2e76f1336a4c8a8179ae8c7bab1b77d538e633246d66b5c64365d0eb7f379420f037ca224c45765e45372f07be
SSDEEP
1536:BfQAl+7ovOFxqFzUihiZ6tj+dmwZ/mNQfsGcQaoiJi:dQAl+pFxYzVh3tj8m2mNQfs/X+
Checks for missing Authenticode signature.
resource |
---|
05f34d0128333f5899c376ed2ceabb39_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE