CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
065da0deab92de3365ed9c41cd47f85d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
065da0deab92de3365ed9c41cd47f85d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
065da0deab92de3365ed9c41cd47f85d_JaffaCakes118
Size
57KB
MD5
065da0deab92de3365ed9c41cd47f85d
SHA1
9164ee1a28cd8a00f44e9103369471eb85213169
SHA256
3402f51919f175abe3c0378b397e3e13d2f20ee77298b57426fbe82128f8ce80
SHA512
1eccc467174f7edb44e3e701b1e0fd6e3b11b87d190c662592a52207a2f88b9108044ad826a0b150ead46116f77db6c8e7fe6215226f67d41eb8b2fb24dcbcce
SSDEEP
768:XxjDQp6DsOfL62l8ovOnJtKJaXvF1FxSFukw8AWe1hzJdk5QkUMEjI+gnxVItTKl:BfQAl+7ovO751F8FukwdpdTZI+E7l
Checks for missing Authenticode signature.
resource |
---|
065da0deab92de3365ed9c41cd47f85d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE