DllRegisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
5e830c870e3588d91d38b5684a16855d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5e830c870e3588d91d38b5684a16855d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5e830c870e3588d91d38b5684a16855d_JaffaCakes118
Size
1.1MB
MD5
5e830c870e3588d91d38b5684a16855d
SHA1
396503160e905bcfceb12480041c35d8b4fd988d
SHA256
82eb7f4a04e026f68a393a0fe97b7bd190389cf4341dabd9b25198f8a5e559dd
SHA512
07416cc98644ea5b52010b64e8c7f5be21c27ab34e198ad21d336fcaf74613fdc2d25024f381b99d41b02f6b770a799a9726f37f2915194fee644e133201ff23
SSDEEP
24576:SMpZ4OxwR1QcQq/W7ihb4bPWmBLXvPmVpTrdzjs00K:SuNZ7Ib8ZBL2/XN
Checks for missing Authenticode signature.
resource |
---|
5e830c870e3588d91d38b5684a16855d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllRegisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ