CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
104e803385fc602827b2823978b81ee9_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
104e803385fc602827b2823978b81ee9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
104e803385fc602827b2823978b81ee9_JaffaCakes118
Size
73KB
MD5
104e803385fc602827b2823978b81ee9
SHA1
700c2a3111c7d4dae90128ed8f54e8152c96295e
SHA256
736970f07e02128af0e6a7c203fbf2e4e5889d760e6d438d2521083ce3df48bc
SHA512
ad8a5f52ffb1e86f69d8cdacb1de48535fb09275bf3c3792271c827a664523d242f97db351024af18e552bc9bcbd13da4da24fe51e26aa92e19d33c156ce781c
SSDEEP
1536:BfQAl+7ovOIjceX8u/RnD8Rcj3yBZ+55b5Sg7itPyJjGkr:dQAl+pIjcI8u/Z8+j6ZebkPyJ5
Checks for missing Authenticode signature.
resource |
---|
104e803385fc602827b2823978b81ee9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE