ServiceMain
TStartUp
Static task
static1
Behavioral task
behavioral1
Sample
2d54c8827ccc46b4869f9871942cef46_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d54c8827ccc46b4869f9871942cef46_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2d54c8827ccc46b4869f9871942cef46_JaffaCakes118
Size
30KB
MD5
2d54c8827ccc46b4869f9871942cef46
SHA1
45944bd0b3f32edaa8c9b0915016a6feb603dc44
SHA256
56750f6a2c19ebe7dfb60763f80e0392dd61fcbbb44a255d351ba27607468d3e
SHA512
7515ab3fb9c99940b4615165063356b6d18c7065d0c82b36257b5f38eb0c2bad5f2968075425deb97cde60b8d23d283d5f89a370bbd014e03ace5e2afc6d8d88
SSDEEP
384:G39VARK0eO3NWUcSUZ690kmcBG1Gz+viaxzfF8+LWAhZhq95pjUemvLwoW3PLcWI:GUockxfcPsdxRAAhy/p423PAJ6xjJAp
Checks for missing Authenticode signature.
resource |
---|
2d54c8827ccc46b4869f9871942cef46_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualProtect
CreateWindowExA
MessageBoxA
UpdateWindow
PostMessageA
ServiceMain
TStartUp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE