CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
1317bf4cd3a328fb2a195831cb11f265_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1317bf4cd3a328fb2a195831cb11f265_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
1317bf4cd3a328fb2a195831cb11f265_JaffaCakes118
Size
71KB
MD5
1317bf4cd3a328fb2a195831cb11f265
SHA1
e9bb89f7d4e060da43ded3d240b3adb182a079dd
SHA256
7569e46533880eb8aed35bf533e4ed155327ff99878b540c30f4d3bb0933f550
SHA512
452e2f508c3fb201f20673c15e6406b10ef8ce742d43cfbee7abbf7f9add2471b7e1b63564325baf0932bf88ea234206c88f8739ee1475b6dde13b4c700c815a
SSDEEP
1536:BfQAl+7ovO/+6eo2Xra9MQwAJ95kApiuhe8mHzQgUG3Y3p:dQAl+p9ea9/wE7k8Jc8esgJip
Checks for missing Authenticode signature.
resource |
---|
1317bf4cd3a328fb2a195831cb11f265_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE