DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Overview
overview
6Static
static
3navinoti.dll
windows7-x64
6navinoti.dll
windows10-2004-x64
6navinoti.exe
windows7-x64
6navinoti.exe
windows10-2004-x64
nii.exe
windows7-x64
3nii.exe
windows10-2004-x64
3uninstall.exe
windows7-x64
3uninstall.exe
windows10-2004-x64
3v.dll
windows7-x64
1v.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
navinoti.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
navinoti.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
navinoti.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
navinoti.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
nii.exe
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
nii.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
uninstall.exe
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
uninstall.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
v.dll
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
v.dll
Resource
win10v2004-20240802-en
Target
af3cf7fe65a1a94eb02e3ce772e21d8c_JaffaCakes118
Size
1.5MB
MD5
af3cf7fe65a1a94eb02e3ce772e21d8c
SHA1
0e21d932154e7b5d337588f4649d59fec4938bca
SHA256
38ebe2c10fdca464ee55b79d9125ed88a51ef88ea32d60a72a74b14fa7fa500e
SHA512
a1033465345061ec5cd976ecd1822609388fdf38b005a516cd60f991a4142b47dece7a9bc64bd13a654a18d9e569a0c3ba73cb9f4be7219689d7d2ac886a6d2e
SSDEEP
49152:cL+P80WMCF045SJthQvWOVW3M1GA+HF0u7eMv+zkl:cL+U0vC+qxeaH1qlLB+w
Checks for missing Authenticode signature.
resource |
---|
unpack001/navinoti.dll |
unpack001/navinoti.exe |
unpack001/nii.exe |
unpack001/uninstall.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ