BiaojpmughNmmldsnnncjlwq
DllRegisterServer
DllUnregisterServer
LimejldmJtanvnoSbqkjmech
ResumeServer
StartServer
StartW
StopServer
SuspendServer
Static task
static1
Behavioral task
behavioral1
Sample
01c709203eddc996c2f3432661ba5316_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
01c709203eddc996c2f3432661ba5316_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
01c709203eddc996c2f3432661ba5316_JaffaCakes118
Size
323KB
MD5
01c709203eddc996c2f3432661ba5316
SHA1
b5d5945d2c67824ba084bc0f546511f71677a25e
SHA256
cbf60d6fa0473f1a0290e278479a1786daea784d7dc2a63198292f7a9ec1a2a1
SHA512
b92ef9637ad8d71cfb5878be83551c31b11b009e5f5643d0a11a91b0ba2cdabb2bb6ad77a6ca65d24a28f33606fa03a2f86038efa50587ddd21fd84b7972f8bd
SSDEEP
6144:wXVlSsCrDRKqimtDMCfh55SEYpv0WMIyOzG/fK/rcZMIMhuz:SVavMCfiv0WMIyUGxz
Checks for missing Authenticode signature.
Processes:
resource |
---|
01c709203eddc996c2f3432661ba5316_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
BiaojpmughNmmldsnnncjlwq
DllRegisterServer
DllUnregisterServer
LimejldmJtanvnoSbqkjmech
ResumeServer
StartServer
StartW
StopServer
SuspendServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ