CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
0636b5aea2ef4caac47ddc20e04506d8_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0636b5aea2ef4caac47ddc20e04506d8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0636b5aea2ef4caac47ddc20e04506d8_JaffaCakes118
Size
40KB
MD5
0636b5aea2ef4caac47ddc20e04506d8
SHA1
2bf85ef55bf4be153276e3697031c2cf8b3c3978
SHA256
37bb67e8e0b11ffe8994defdef3707db178147b23049d5aa54d45fec4ae1fa44
SHA512
2bd85cee48a3b38ecb804ca010854ad6aa61e23a21b2698650450ddb9423477120b5014c58ecb3e231818f6fafc7b094fbd03051a09309bcb6648871950804cd
SSDEEP
768:XxjDQp6DsOfL62l8ovOGSnPsJMQH9XBfuTtL1gzHd6fOPbMGv:BfQAl+7ovOrGHH9XBCSd6f4/v
Checks for missing Authenticode signature.
resource |
---|
0636b5aea2ef4caac47ddc20e04506d8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE