CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
06e8d7d2d157691d87a01ade4c1d5089_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
06e8d7d2d157691d87a01ade4c1d5089_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
06e8d7d2d157691d87a01ade4c1d5089_JaffaCakes118
Size
42KB
MD5
06e8d7d2d157691d87a01ade4c1d5089
SHA1
07a9ff2bef421cd6ad687848557ec70b5425fbc3
SHA256
eff3903328aa828f0a8babcdd28adaff9c9652774d2bc78a5b059b0104a0253a
SHA512
f0a9bec689333705ce2e79ff5aa2c74ed90afb2673e55bd8a55be126d412426be866b36db1eac5ebb9f56b74d6cbb50e67a5d483b972169386a99deeac310768
SSDEEP
768:XxjDQp6DsOfL62l8ovOF9iCje7jx3FZVEVHLtK6C0GL2BmoCCrJsVsbaJVM9:BfQAl+7ovOF9iCje7t1ZgHhKIe2cAJso
Checks for missing Authenticode signature.
resource |
---|
06e8d7d2d157691d87a01ade4c1d5089_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE