DllRegisterServer
DllUnregisterServer
NevtAmdfxsoZubqmdnz
QotlcerqxcgFjxvwybou
ResumeServer
StartServer
StartW
StopServer
SuspendServer
Static task
static1
Behavioral task
behavioral1
Sample
f3e1d30953397769e13eab1ecfa92201_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f3e1d30953397769e13eab1ecfa92201_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f3e1d30953397769e13eab1ecfa92201_JaffaCakes118
Size
288KB
MD5
f3e1d30953397769e13eab1ecfa92201
SHA1
17f87e3791173b92d3d66a20b9df722792617f9c
SHA256
46c7217bebfe95985d2ea3eca5ee3228455ffa62533e589a4d060ddedeec822b
SHA512
fde383965b43c55921c848bfb7bfaee20a375e5fe7b7efe3b33b6e5a0eba04acc90d4b0f2dbfa18d167eb829d21eec056d66ad73f6dcecced7eea0bdc43a053b
SSDEEP
3072:p6QlU5T0+vk+wYDgN3XwmbvV4Ynnbe9rhNifQMpnIjZ9jAPUn4CbwKL0Fo3dgqT+:pXEwZSZeKZVA6BNL0F1h31eMgIfH
Checks for missing Authenticode signature.
Processes:
resource |
---|
f3e1d30953397769e13eab1ecfa92201_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
DllRegisterServer
DllUnregisterServer
NevtAmdfxsoZubqmdnz
QotlcerqxcgFjxvwybou
ResumeServer
StartServer
StartW
StopServer
SuspendServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ