CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
41889a6216568a375579a6703dac3bb8_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
41889a6216568a375579a6703dac3bb8_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
41889a6216568a375579a6703dac3bb8_JaffaCakes118
Size
67KB
MD5
41889a6216568a375579a6703dac3bb8
SHA1
c2e07be537dfdef439a8dc755d8dc0369d3049cf
SHA256
eafc01c3fd18113a0349c7b293049e264694d5e05b21b12dfe5a847ec75c14a1
SHA512
8c7d5d3f5342cc02a270c85f99b26215f0a276ca460c97dd7a6045f2d2e450d36e200682987bb1fa07ca5d21f8ddb5bf5a0a8f4c7aa5e2efc8a44b5638584ae8
SSDEEP
1536:BfQAl+7ovOVQCooo+b+ianeZK4KgB32hzu5Rdr7RwZVn:dQAl+pSnWbyedK+AmzfqZVn
Checks for missing Authenticode signature.
resource |
---|
41889a6216568a375579a6703dac3bb8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE