DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
xftwtr
Static task
static1
Behavioral task
behavioral1
Sample
6290384cb3470a22904a90000f7864f2_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6290384cb3470a22904a90000f7864f2_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
6290384cb3470a22904a90000f7864f2_JaffaCakes118
Size
227KB
MD5
6290384cb3470a22904a90000f7864f2
SHA1
d393800690c4471856ae9ff58d5327156a0576d1
SHA256
ed7241769a5c56ecf93e7f59ee6ad11f4641b89bf431c649976ce594c9e53a3e
SHA512
74d67447a991a6520a3a7eed4417b82324a9effd3ded951467254c599aa838fad0fb3b8a713fb558ea5f05cc9ff769e7757928d0dfaed52b25dceb6d11418da0
SSDEEP
6144:WoGQj78AcoGQj78AcoGQj78AcoGQj78AcoGQj78AcoGQj78AcoGQj78A:WVvVvVvVvVvVvV
Checks for missing Authenticode signature.
resource |
---|
6290384cb3470a22904a90000f7864f2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
xftwtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ