CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
066002742fb4a41b79fecd28bd18e338_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
066002742fb4a41b79fecd28bd18e338_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
066002742fb4a41b79fecd28bd18e338_JaffaCakes118
Size
63KB
MD5
066002742fb4a41b79fecd28bd18e338
SHA1
99551ceeecc1bdb328a602106e096f9aa9118582
SHA256
9de99fd8e8212afb857b64511cdc47947c7c72d53d2c99206d09e3e803bc840d
SHA512
03f6651a7532c994d36e947cb342ebad3bae35733826bec810620095367c14bcb651f12505e7d5ab1c7d9a16a11ef67011ddf5573bf6d43c758ce5bcc04be090
SSDEEP
1536:BfQAl+7ovOljEZFPrfJAGIifexSnWGB7U9xF6t52sKkd9mNqB:dQAl+pZo9A5VSWag9T672GwqB
Checks for missing Authenticode signature.
resource |
---|
066002742fb4a41b79fecd28bd18e338_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE