CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
066007326f02e0aa21d69569dbae0501_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
066007326f02e0aa21d69569dbae0501_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
066007326f02e0aa21d69569dbae0501_JaffaCakes118
Size
63KB
MD5
066007326f02e0aa21d69569dbae0501
SHA1
b3ba1dc997e999109fd3c9a0eab6f35464012d3e
SHA256
5912ef836ddbd6dbbc5ea5b91b6bf6dac401a7bb9b98b30e0048d7e9569c96e9
SHA512
32470996249904fd241af5b0e1b017ebdb3dbfee62c7bd93c89b070347ac531a1f6a6ccc3ce07cdc519a649d2da64dc1e9ec9652658dca4a10ab99350fe0160b
SSDEEP
768:XxjDQp6DsOfL62l8ovO3Fa1g1tv00AI1P9G+EJuTELr+xKllmfAXO21ZS1vrRChX:BfQAl+7ovO32eA6/78lwAXkDDjvQXdp
Checks for missing Authenticode signature.
resource |
---|
066007326f02e0aa21d69569dbae0501_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE