ClbAddData
NZTHQOMV
ClbSetColumnWidths
NMIHQKVK
Static task
static1
Behavioral task
behavioral1
Sample
1787b93ba5bff9d2b06a3b1a3be5624d_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1787b93ba5bff9d2b06a3b1a3be5624d_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1787b93ba5bff9d2b06a3b1a3be5624d_JaffaCakes118
Size
9KB
MD5
1787b93ba5bff9d2b06a3b1a3be5624d
SHA1
1c2e9a6e44cd7b81a9917698879f3055774b9533
SHA256
9acbed5686ca8abcc3b859850a679047e44dfe671e7c2bb0967d10518ad581ec
SHA512
1cc8677cf2d4b4eca129005ff28e614dd936dc2a692d99747daed820b8f087dbf8a5aba989f33e7431efb7c36463d82849d74f8b2518200fd2bd410ac5306f67
SSDEEP
192:S9halvkMH3p9dzJ1tEsWbWZso65sk5lq2:S9h2Pdz6sqWqN5x5l/
Checks for missing Authenticode signature.
resource |
---|
1787b93ba5bff9d2b06a3b1a3be5624d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord823
ord825
strrchr
free
malloc
exit
__CxxFrameHandler
_initterm
_adjust_fdiv
_strlwr
_stricmp
ClbAddData
NZTHQOMV
ClbSetColumnWidths
NMIHQKVK
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ