DllRegisterServer
DllUnregisterServer
PauseW
ResumeServer
ResumeW
StartServer
StartW
StopServer
StopW
SuspendServer
Static task
static1
Behavioral task
behavioral1
Sample
f1da093e8e71617daffbc2c3898dc429_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f1da093e8e71617daffbc2c3898dc429_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f1da093e8e71617daffbc2c3898dc429_JaffaCakes118
Size
164KB
MD5
f1da093e8e71617daffbc2c3898dc429
SHA1
b80a66abfd0d7991f39d8144ed35f79d204bd8f8
SHA256
1581adac92e80feacb7fa3b93ad6c0c69aed95a757cbf26df630e93d7e848a12
SHA512
5afc2b8fc834f1824b6dc7653a4b4788fca81ade46e285ec3f0964dede0a84ce5dd115466a913d120407268030229e81d49df54364341de39c30a9d38039dcd3
SSDEEP
3072:cTltpXTmRUD82PbjCb5lcUpLhUf05x97bsqWpaM0fB8U6xcBwVSuU1E7YbqnOuOD:CuC7jj05CUpLhUsj97hM28xmwUuUKkbP
Checks for missing Authenticode signature.
Processes:
resource |
---|
f1da093e8e71617daffbc2c3898dc429_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
DllRegisterServer
DllUnregisterServer
PauseW
ResumeServer
ResumeW
StartServer
StartW
StopServer
StopW
SuspendServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ