CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
3af1d4c23084e4400fbbc872b65f4be3_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3af1d4c23084e4400fbbc872b65f4be3_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3af1d4c23084e4400fbbc872b65f4be3_JaffaCakes118
Size
55KB
MD5
3af1d4c23084e4400fbbc872b65f4be3
SHA1
2a889490a146b0df4f82bdb0d03f12be0543d378
SHA256
867d591abecd9589421ced416f301675fd54bd61f742d9cf2214bb7d1de468c1
SHA512
38a70e14cd4d3244ce30280508f98eba52c02c695cbda62b691a36a7940c9c6ef0534ea3cfe2c991aedf23bc7985346ded52c77bbbe306528eef0ed12d6f49fd
SSDEEP
1536:BfQAl+7ovOAYBijW7O3uzTwFpkowUytUZ+F9:dQAl+pAU5TwFzytUZ+F9
Checks for missing Authenticode signature.
resource |
---|
3af1d4c23084e4400fbbc872b65f4be3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE