Go
Heart
M0ZHE
On
ServiceMain
main
Static task
static1
Behavioral task
behavioral1
Sample
369c7770dc978662bcef7ec6b5668bf6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
369c7770dc978662bcef7ec6b5668bf6_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
369c7770dc978662bcef7ec6b5668bf6_JaffaCakes118
Size
140KB
MD5
369c7770dc978662bcef7ec6b5668bf6
SHA1
fb766f990c2ff7d3e13b7c354d7020349eaf4d6d
SHA256
4b2ff97971ac2541c43561310da92f826be82fbae361c8536bf251202500e5ef
SHA512
27bd9f7f03979caa12422a0398c10d9ea11182c0fc17816db64381e7f02cda20853385b7bcc099799caa005d948df713c73ecb5247ddf4c4bf15537da1762f07
SSDEEP
3072:lJXpjYJyw35L0oJ2D+t+paKeU7khuhm9RLEWoNu:biJyw3tbEzpBp7khQm9RL1oNu
Checks for missing Authenticode signature.
resource |
---|
369c7770dc978662bcef7ec6b5668bf6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Go
Heart
M0ZHE
On
ServiceMain
main
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ