?druio@@YAHXZ
?dweby@@YAHXZ
?hoprtw@@YAHXZ
DllRegisterServer
PluginInit
Static task
static1
Behavioral task
behavioral1
Sample
48878e6ae9aad7bca993b41cfa36351ae853ec3a59683bcb0ed5accf7c595202.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
48878e6ae9aad7bca993b41cfa36351ae853ec3a59683bcb0ed5accf7c595202.dll
Resource
win10v2004-20241007-en
Target
JaffaCakes118_26da6bffe28edb5a50a339e8e66f823b30cb6a6fcfafa699cfed0c3722cff810
Size
33KB
MD5
96de0ca0e0cb79f92ce594520845154e
SHA1
09345cce5a8d34a0cee30e6e063ae980752241e3
SHA256
26da6bffe28edb5a50a339e8e66f823b30cb6a6fcfafa699cfed0c3722cff810
SHA512
9973d9ae6f77bb785705715ed5c1493c25bcbf3cc3b435ea3490a79bdde571e9341516b830199b64e6735ffeca7f8a94bd3a34381ce822c6011c6d5efa551b69
SSDEEP
768:Wdns885cblHTcDbJB0vsBgaeZHcAEz+LCd8//TKNtSPxQ2ZK4+:M98UgDbJB0kBgaeZHcly+oPB+
Checks for missing Authenticode signature.
resource |
---|
unpack001/48878e6ae9aad7bca993b41cfa36351ae853ec3a59683bcb0ed5accf7c595202.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
LoadLibraryA
GetCurrentThreadId
GetCurrentProcessId
GetProcAddress
?druio@@YAHXZ
?dweby@@YAHXZ
?hoprtw@@YAHXZ
DllRegisterServer
PluginInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ