ClientMain
DelFilex
Install
ServiceMain
Unstallx
UpdateX
Static task
static1
Behavioral task
behavioral1
Sample
31dd67fd1bf6e70879abeb4f79fbb5fa_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
31dd67fd1bf6e70879abeb4f79fbb5fa_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
31dd67fd1bf6e70879abeb4f79fbb5fa_JaffaCakes118
Size
129KB
MD5
31dd67fd1bf6e70879abeb4f79fbb5fa
SHA1
c9dce81f80b751d0f7016fd98101963f9e238c68
SHA256
95d36fddd0cc8461dfeb4e6aaac9ee7fc19dfbafb03186a6e683003bb66b2a4a
SHA512
54a444b0093de4d87e3df46bbc58f4a91f1753a626bd5b4accbc8a26e95eeeb12364a7916c47ee1b66153602c2bddde77acdb37b3e5b54619bafb93bb947b751
SSDEEP
1536:ZO8ZDOA5+JkFI9VciPrp83pnZo5WcZUlbf1eQRWPAqiXJ5wxyKdw1CZl0SyZCIOS:9t5+oYp8Qqlb9eUWPiwxy4wg/+yiT
Checks for missing Authenticode signature.
resource |
---|
31dd67fd1bf6e70879abeb4f79fbb5fa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ClientMain
DelFilex
Install
ServiceMain
Unstallx
UpdateX
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ