CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
065fa34393da935ce1745483a4e15741_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
065fa34393da935ce1745483a4e15741_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
065fa34393da935ce1745483a4e15741_JaffaCakes118
Size
61KB
MD5
065fa34393da935ce1745483a4e15741
SHA1
cc92cfc94cb8a93e409ef06d8f83b9ba9bb87bba
SHA256
9936394e5138edb917f148fc9b4cd29dbb35c7d1125d424966ca9f21fca4e408
SHA512
205b38cd8eeff8081f99852e41d45d4a9ebed4b2eead283298cdf9dcd1df61dc263fdf4729041f25daaac27c0c059db963d40d6c0376b82013d70bcae13f8119
SSDEEP
1536:BfQAl+7ovO1uLBZylq/cgR66KHxgq3LGujA+0jzirri/uXx:dQAl+pkbylq/cE66xaqu2OrrBh
Checks for missing Authenticode signature.
resource |
---|
065fa34393da935ce1745483a4e15741_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE