CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
0653c3c419e39bb67bfac910effc3291_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0653c3c419e39bb67bfac910effc3291_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0653c3c419e39bb67bfac910effc3291_JaffaCakes118
Size
70KB
MD5
0653c3c419e39bb67bfac910effc3291
SHA1
ffbdc9aed0f318a13ecbec0634bec9e1b9771f54
SHA256
e27d2a190c024fedd95af03a42fb3bc1ddb823342dced2b26c6d27fd7845557d
SHA512
13e8fd9926c5d42e13cc32e574bee18379786a2bce3aeff9df3503dede35644fe366e86dc0da7ef6330b2f38b8cf0510231e50db54596f4ed06aac9b217931a6
SSDEEP
1536:BfQAl+7ovOCt+Xmgy3RyVlgmNmG7x2php+GRCz6bw3Vg5UYUpp:dQAl+pn2g8cg4gvp/CB3Vg5RUpp
Checks for missing Authenticode signature.
resource |
---|
0653c3c419e39bb67bfac910effc3291_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE