CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
0c4cbcaf77b04220e33cc8d84b9f651a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c4cbcaf77b04220e33cc8d84b9f651a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0c4cbcaf77b04220e33cc8d84b9f651a_JaffaCakes118
Size
76KB
MD5
0c4cbcaf77b04220e33cc8d84b9f651a
SHA1
09544f602ca86a20d0c9f666ab834fa16d0cf307
SHA256
dddd847637bcf1faa7374ac8319d4ee31693a80e00513db2a64f9cbbe9c4faa3
SHA512
7d7fd4108a015f30501f742c82cfaf1d3fe5b43a59c0d81a58029282d124713db3f66e1ffe44cff7a0a63fe0faada353ca079d32c6c3d021ceb32fb2bcfb4eca
SSDEEP
1536:BfQAl+7ovOXtyI/1/cn6RtLrhipd5v+n0zAPfE2HqSiWNcNamHA8p:dQAl+pQCPtLIpLG0zcfE2K2NWamH/p
Checks for missing Authenticode signature.
resource |
---|
0c4cbcaf77b04220e33cc8d84b9f651a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE