DllRegisterServer
DllUnregisterServer
NevtAmdfxsoZubqmdnz
QotlcerqxcgFjxvwybou
ResumeServer
StartServer
StartW
StopServer
SuspendServer
Static task
static1
Behavioral task
behavioral1
Sample
a596169960aeede1bab8ee6fea3cac49_JaffaCakes118.dll
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
a596169960aeede1bab8ee6fea3cac49_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
a596169960aeede1bab8ee6fea3cac49_JaffaCakes118
Size
288KB
MD5
a596169960aeede1bab8ee6fea3cac49
SHA1
94411a43f529e7918583fe38b3c01a98677b5ab8
SHA256
390145df647bf727bd629c4c4c77a211c0776f6b03eec501c35c377ed520165c
SHA512
e5e943f0e696f92443c05d5f67420e2502d203a87ee5cf3b9204377657d82d3cd1eef02ce532436ecb6b2fcbfad6ada79ed788b472d401566cb7355dbd3781ba
SSDEEP
3072:p6QlU5T0+vk+wYDgN3XwmbvV4Ynnbe9rhNifQMpnIjZ9jAPUn4CbwKL0Fo3dgqTx:pXEwZSZeKZVA6BNL0F1h31eMgIf0
Checks for missing Authenticode signature.
resource |
---|
a596169960aeede1bab8ee6fea3cac49_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
DllRegisterServer
DllUnregisterServer
NevtAmdfxsoZubqmdnz
QotlcerqxcgFjxvwybou
ResumeServer
StartServer
StartW
StopServer
SuspendServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ