ServiceMain
\wK}jnq{}
DoMainWork
Static task
static1
Behavioral task
behavioral1
Sample
01f812a657d9df3144fed46d3569b6dd_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
01f812a657d9df3144fed46d3569b6dd_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
01f812a657d9df3144fed46d3569b6dd_JaffaCakes118
Size
93KB
MD5
01f812a657d9df3144fed46d3569b6dd
SHA1
717b7ef037ace8cab23cab92f00ca3fcd784e50f
SHA256
7702bce18526c593cdfefcc602d319f54587991d594ffbe202541ddf0a135be0
SHA512
0df6f64ad8992c0f0c450d80ea9a369a2f5896a245d522a98c74ae899420c697fd193858efdada219eae2a78b9d02425da0b1ef833c8ed462eeb8d7975d2d7c9
SSDEEP
1536:Cy3sncgOrIFOOicuI/RYDpQWPabX4RfqydGr/iqMBKoYo36zyw9Kzy3:X3sVyooqRYDp2IRf+MBeQwB
Checks for missing Authenticode signature.
resource |
---|
01f812a657d9df3144fed46d3569b6dd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
\wK}jnq{}
DoMainWork
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ