DllRegisterServer
DllUnregisterServer
EhvwwyqzzLvcghzzjzncdpn
NcqvrxpjFaqpogvdYvcpigrgbg
ResumeServer
StartServer
StartW
StopServer
SuspendServer
Static task
static1
Behavioral task
behavioral1
Sample
13362e3682be5d28d2b4245b933d7cfe_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
13362e3682be5d28d2b4245b933d7cfe_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
13362e3682be5d28d2b4245b933d7cfe_JaffaCakes118
Size
239KB
MD5
13362e3682be5d28d2b4245b933d7cfe
SHA1
e61511a4897c684436ff87a23da8a73ab782574e
SHA256
3331b44971d3e258dd09547bcb3f012694dd78e2f88553601ccabd8d779172b1
SHA512
15ad1d1cdb5359ad3826e1afc324567879e0843db1fa7094c8a96a9ad7143f2647e0c78dff028a69bd8bd8fa8de820488173cbe1810bad7ce5501b0800621983
SSDEEP
6144:1RlRUtrf4RRT+awNqpKohpb7EUwtqvgGT24s3AVLAaWMCV4jPzxHQu:1nGFuRW0NVQtOgFFWWMfjLdQu
Checks for missing Authenticode signature.
resource |
---|
13362e3682be5d28d2b4245b933d7cfe_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
DllRegisterServer
DllUnregisterServer
EhvwwyqzzLvcghzzjzncdpn
NcqvrxpjFaqpogvdYvcpigrgbg
ResumeServer
StartServer
StartW
StopServer
SuspendServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE