DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
xftwtr
Static task
static1
Behavioral task
behavioral1
Sample
1619bbb1fb09d9d7175f38560eaecc46_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1619bbb1fb09d9d7175f38560eaecc46_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
1619bbb1fb09d9d7175f38560eaecc46_JaffaCakes118
Size
167KB
MD5
1619bbb1fb09d9d7175f38560eaecc46
SHA1
645b99fe26a8720db87fca1c71c718985e0f0f03
SHA256
855817eac84f8583e003401b69250ebd782bac2399a586076e3f3bea7a56e9fa
SHA512
072eb49740e0cfd558210ce2da97dfdcff4cf7165714327cb278f39660582de2b25bc562b67c48ca823b0cabc2bea7c329f3c724046d01239f5ad7a7350905b3
SSDEEP
3072:/+6AVV7N/w+6AVV7N/w+6AVV7N/w+6AVV7N/w+6AVV7N/:26A77l6A77l6A77l6A77l6A77
Checks for missing Authenticode signature.
resource |
---|
1619bbb1fb09d9d7175f38560eaecc46_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
xftwtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ