DllRegisterServer
DllUnregisterServer
NevtAmdfxsoZubqmdnz
QotlcerqxcgFjxvwybou
ResumeServer
StartServer
StartW
StopServer
SuspendServer
Static task
static1
Behavioral task
behavioral1
Sample
e3d928002301735fcbecb371dd6e5dfa_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e3d928002301735fcbecb371dd6e5dfa_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
e3d928002301735fcbecb371dd6e5dfa_JaffaCakes118
Size
288KB
MD5
e3d928002301735fcbecb371dd6e5dfa
SHA1
7818ff003f865aeb162ba08512d61fdc0d180ad3
SHA256
de13a86b2f0009a06f11ff61ddaac246fde857bc203565f3c94a16a014131b0a
SHA512
df3af50c90bff120e3bd0617d349c0719dad2394860c4f01a53cf81a49865577457356e42d7555f9bb6358db32c49fc8ffcee463d47754fabf9a6f73a7c16991
SSDEEP
3072:p6QlU5T0+vk+wYDgN3XwmbvV4Ynnbe9rhNifQMpnIjZ9jAPUn4CbwKL0Fo3dgqTj:pXEwZSZeKZVA6BNL0F1h31eMgIf+
Checks for missing Authenticode signature.
resource |
---|
e3d928002301735fcbecb371dd6e5dfa_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
DllRegisterServer
DllUnregisterServer
NevtAmdfxsoZubqmdnz
QotlcerqxcgFjxvwybou
ResumeServer
StartServer
StartW
StopServer
SuspendServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ