aemsSid
ServdddDo
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
1b717f978a578a9738db47df6f6e0fb9_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1b717f978a578a9738db47df6f6e0fb9_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1b717f978a578a9738db47df6f6e0fb9_JaffaCakes118
Size
340KB
MD5
1b717f978a578a9738db47df6f6e0fb9
SHA1
b890f405b706f8ce89b5ad79979a2f9de03a1281
SHA256
3fe05f10e61d957a99f731882cf5dd0a66fa02fe0392a0d4222bd413f9a4cd58
SHA512
7dfa0600ff8b9b7b3c802e8203c1d0a210277913325035b957cadf6d308749648602ba74cd716f05bbdcf8456ea4262e1f0950e9a72b4ba2c5c25cf59718df3b
SSDEEP
6144:dgvvB4iTtEhcTrCxVZ6SyLiSNVyXQrokZ8ZhBreJHKH2CpnzNBmMYSA:qBgSKDyLHNVBskSSJqHnnYGA
Checks for missing Authenticode signature.
resource |
---|
1b717f978a578a9738db47df6f6e0fb9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
aemsSid
ServdddDo
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ