DllRegisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
3e634be323e4e4cc4890fc9c937fecff_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3e634be323e4e4cc4890fc9c937fecff_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
3e634be323e4e4cc4890fc9c937fecff_JaffaCakes118
Size
160KB
MD5
3e634be323e4e4cc4890fc9c937fecff
SHA1
5f7af72d34ae3cd4a57978cf181e6f76575e60f0
SHA256
e99ff1ac72fde14d5f7fbeacdef5b5fadf47a15aa3e83e9933e16bcefba67115
SHA512
939f5d396f6b573b35dbf8e71bbb96ceee6008dff3c083b79921a74b9ce5fbcee1ba0210281e62fc87dd43822851c6a6e1926f01d38cfb48795207a77e95ddbd
SSDEEP
3072:I4B82lY0cky4+pE8k5rmQD+nclsKwCGCXG89QDcGxQuUqhTBfgy9oOJaZZlHYBG:Gopv+pu5hd7QDVBUqhTBIy2OJa
Checks for missing Authenticode signature.
resource |
---|
3e634be323e4e4cc4890fc9c937fecff_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllRegisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ