CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
2babf06629cb5f5752de7c2471e6c63e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2babf06629cb5f5752de7c2471e6c63e_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2babf06629cb5f5752de7c2471e6c63e_JaffaCakes118
Size
67KB
MD5
2babf06629cb5f5752de7c2471e6c63e
SHA1
a1ddd507a7470de6539ea41b68114cb5b52ce52b
SHA256
f4c61b1303a45ec7d6c8e41d795f728cea7e1ba7d1e032bc8d295dcc92eab7d7
SHA512
f90553af1a754320f570f53649e014e2d2014d181bead3f40159b2936ad65f10aabf06a8e85c4775f6c259f64804548db850699943e5789f27f85afcc7dd4e36
SSDEEP
1536:BfQAl+7ovOF6+fk/fD+WqXA4HuzOsReJtlvCKGmgapuuS8T:dQAl+pI+fOyWqw4H2pReIaprJ
Checks for missing Authenticode signature.
resource |
---|
2babf06629cb5f5752de7c2471e6c63e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE