CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
53bdb55800c8ad10dd214d6b925e9136_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
53bdb55800c8ad10dd214d6b925e9136_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
53bdb55800c8ad10dd214d6b925e9136_JaffaCakes118
Size
63KB
MD5
53bdb55800c8ad10dd214d6b925e9136
SHA1
f05edbfdec92056591cd49606dd8e7654c5f16b9
SHA256
0d4f11b8331954722d9c9f691616374231e0a10308588340f3412d3e0c15a57d
SHA512
b56cf6dc2ac83d4fbdd278e78e6ad9ead686f056c2ad2447791de55cd6c19c301ac66bd513ee7971185eec6e337abe2b656112ad694c3221b6507da2d01d108a
SSDEEP
1536:BfQAl+7ovOY8/WLcOeBcaVKRaaiaigcd60QEklv:dQAl+pY8OLiBtV8ib7QEEv
Checks for missing Authenticode signature.
resource |
---|
53bdb55800c8ad10dd214d6b925e9136_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE