CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
0639c38cc04bb30ffa505775db29a0e1_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0639c38cc04bb30ffa505775db29a0e1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0639c38cc04bb30ffa505775db29a0e1_JaffaCakes118
Size
65KB
MD5
0639c38cc04bb30ffa505775db29a0e1
SHA1
3abfba15d0cdb203430850acec5aff1011de5dea
SHA256
469a1314299952cc4fffba7b90295619913f359ac48d8a808efa1c8d88610a7a
SHA512
12243aa9b09d345de6e5259527eea6a8eec2b421d82cc3843cb700b5509ae2ad049bddbe20a47a6fa6587ef138bb0ad9d2a928d2a074b547996c7f3c02cf539b
SSDEEP
768:XxjDQp6DsOfL62l8ovOgtu/V14MUnzHynkQyx0tOszTpHGVDWT9pT1RrKWkCWQ2B:BfQAl+7ovOgQ/4zHSNTB/yoOZPMDK
Checks for missing Authenticode signature.
resource |
---|
0639c38cc04bb30ffa505775db29a0e1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE