LoadProfile
ServiceMain
TestFunc
Static task
static1
Behavioral task
behavioral1
Sample
2e54a8f613d4fceb2e6cbd7e0eb8a761_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e54a8f613d4fceb2e6cbd7e0eb8a761_JaffaCakes118.dll
Resource
win10v2004-20240708-en
Target
2e54a8f613d4fceb2e6cbd7e0eb8a761_JaffaCakes118
Size
27KB
MD5
2e54a8f613d4fceb2e6cbd7e0eb8a761
SHA1
7228f96fb0e4701716c839c8974ea38d8a3ec74e
SHA256
4b5fec2bf665cae0e4308c70b78e21b4396a6b4dadd661609627a71586e1618b
SHA512
ada698165afa36fde1f82d446dd3ebc8b1db5069dd6430ab1213918d953501a58528f440eeb6cbdc740f8f77240fdb0ae111a6a3fe1775a12646ab1c4642a4b3
SSDEEP
768:zn6MBfgKCVJ+90Y5jlbZQAzX2ouUY73HI:znxBsJNQjlNHb23TI
Checks for missing Authenticode signature.
resource |
---|
2e54a8f613d4fceb2e6cbd7e0eb8a761_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
capGetDriverDescriptionA
LookupPrivilegeValueA
SetProcessWindowStation
TransmitFile
connect
StrRChrA
GetModuleFileNameExA
CreateStreamOnHGlobal
_adjust_fdiv
InternetCloseHandle
GetCurrentObject
ShellExecuteA
LoadProfile
ServiceMain
TestFunc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE