168988288
5286758898
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
0e4feb197dcea856c4aa9dd337a6716b_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0e4feb197dcea856c4aa9dd337a6716b_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
0e4feb197dcea856c4aa9dd337a6716b_JaffaCakes118
Size
81KB
MD5
0e4feb197dcea856c4aa9dd337a6716b
SHA1
ea7d0eb7ece1ef8a2fc1ad991376286e8fab4527
SHA256
5aad8a347226c22afc55497bd64b852c809b8e27371b4c018249e22ab284364d
SHA512
a00756e9c906fc44298f0551232f081be10081f19975e7ab82d9d212546bb718d01e84cffd6fe695a005f3625e9b97b08cf751b50761ce2c011cf8fcbc4f61af
SSDEEP
1536:g5NzcUGQQvLt9yydgHLdNYJDIdI42glFu4MEramH+0d473jbH1732:CNdQTt0KGL3YJDw/L/Nf473H17m
Checks for missing Authenticode signature.
resource |
---|
0e4feb197dcea856c4aa9dd337a6716b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
168988288
5286758898
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE