CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
0643ddd1fb8a670e37c78f08c8f89e5e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0643ddd1fb8a670e37c78f08c8f89e5e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0643ddd1fb8a670e37c78f08c8f89e5e_JaffaCakes118
Size
73KB
MD5
0643ddd1fb8a670e37c78f08c8f89e5e
SHA1
88d6d93ae624541946e2a785d54f224dad6ac2a5
SHA256
277cee4953a045f88e8de7ac6a0e6fe5724d651a03bbf4805626963be7da062d
SHA512
015b423aa2f182b8740996ca5af24238274f8eb5ad7836ce4489e894efa94c99f41cb85315e716af02fb86e56bd801bfb90e43dac5d25b311589e6b0313cb279
SSDEEP
1536:BfQAl+7ovOmCyuYgZwSXUnlOWIx7t0V2BoV9dexS6K2qfHyStp:dQAl+pmCyuYgqhVIJ63b6K2TStp
Checks for missing Authenticode signature.
resource |
---|
0643ddd1fb8a670e37c78f08c8f89e5e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE