InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
PPPP
QQQQ
Static task
static1
Behavioral task
behavioral1
Sample
2caa8172ee1ef278958a817e94a20cc4_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2caa8172ee1ef278958a817e94a20cc4_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
2caa8172ee1ef278958a817e94a20cc4_JaffaCakes118
Size
48KB
MD5
2caa8172ee1ef278958a817e94a20cc4
SHA1
8b5ef82a2c7fdf28f7bfc69727d25f719154da28
SHA256
1cb609695d4a1adfb20f796b1d93d24a6379aa0e784a4641f3d9615f46949e07
SHA512
cde39e0d9e3608e03b154b8bcce797968438a51c761e6be00bbf82656354a4a31917230fd6ceba75ebfe74813f47c3fdc85726214a90d96136d3a94ce57e7265
SSDEEP
768:jJ2olLhagXapBinx6OMOpBCwnLgN2R+6fIfKLk288K5JJkz:jJlAgLx6OMOH/8icKLA8K4z
Checks for missing Authenticode signature.
resource |
---|
2caa8172ee1ef278958a817e94a20cc4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
PPPP
QQQQ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ