CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
06604327d88cf87ad568444286b62fe8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
06604327d88cf87ad568444286b62fe8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
06604327d88cf87ad568444286b62fe8_JaffaCakes118
Size
66KB
MD5
06604327d88cf87ad568444286b62fe8
SHA1
5321c12257fba8c220aad4bcecf08a4c8fd1d033
SHA256
edb9a16876dae5b873de914fd232151cda6d223a3dde0d15dad08a29b9159506
SHA512
2aba7ff522f3ccea90fac6112dc8b8a52e37d996cb1047ac02b61ff4d87fd7a9afdb26f69bc50ac96c200704448c7e4eb1e6360b32853007bfbb1aa683f284e0
SSDEEP
1536:BfQAl+7ovOlaTj+YrGHM6o/zSMfTEhEYR6xYAVoWuIjb:dQAl+penrGHM5zxfTtYR6xtVtbb
Checks for missing Authenticode signature.
resource |
---|
06604327d88cf87ad568444286b62fe8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE