CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
0875484604e2e3b1e4a28dad3725e74f_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
0875484604e2e3b1e4a28dad3725e74f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0875484604e2e3b1e4a28dad3725e74f_JaffaCakes118
Size
61KB
MD5
0875484604e2e3b1e4a28dad3725e74f
SHA1
4af106c3c32197a192332cc8e13364b70bda66eb
SHA256
057e282a9bf29b195ff482f7507c0fa2b7056598cbf32fba579dd33b3dc60d4a
SHA512
3818db5ef3207d812da98c6ecc1b4aef382b0f258507961385614e7ab79748c14204d15fe581ad79324acf143dbb40d6154a0780dcdfcc69ba0dfd876d4357d7
SSDEEP
1536:BfQAl+7ovO5SvEbumaCNVk3lO6jY4KwF+FkBP+UX5oIp:dQAl+pmE6maCNVwO6jY4KwIFemUjp
Checks for missing Authenticode signature.
resource |
---|
0875484604e2e3b1e4a28dad3725e74f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE