CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
05f752798e5d4a7fcd88a2d8d9dca5f6_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
05f752798e5d4a7fcd88a2d8d9dca5f6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
05f752798e5d4a7fcd88a2d8d9dca5f6_JaffaCakes118
Size
64KB
MD5
05f752798e5d4a7fcd88a2d8d9dca5f6
SHA1
1ccc10a0628d2b7f5107333777c038bc9302240a
SHA256
fb811240f6f3565e3ea224f93e9d0cd757dbd17237c48b05a809737ada34850a
SHA512
b4d66fb0e86ce3afd034dcdb5041d0c0a57ebfad2206fbf24a483d2bf72f5975860298ad75d13aefc4db4fdcd9459ba3fd46b8d7a73b5f7f9fe4bdda2217d3e7
SSDEEP
1536:BfQAl+7ovOcT550Y/LIX9ABZVDIzPd13h99MUMGK3u7AEO/9Ap:dQAl+pcUY/LU98DIzffuUMnu7HOup
Checks for missing Authenticode signature.
resource |
---|
05f752798e5d4a7fcd88a2d8d9dca5f6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE