DoMainWork
JamBanagd
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
3521477237898cff23d91357692e0a2e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3521477237898cff23d91357692e0a2e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3521477237898cff23d91357692e0a2e_JaffaCakes118
Size
69KB
MD5
3521477237898cff23d91357692e0a2e
SHA1
a503273b8f42eb625eac60add1ba8ee03eacbb1d
SHA256
459c930f16e5e6cd65598a19c77370550a466f85f03748702efeb1ab4e29600e
SHA512
7419a69a3ef4a7f22b032df83facb74f3cc25b85d250a1e55c3e3c091d4b1141124b719ed67ef342f3540fbcb281efe4173b771dc0d5aa2a37c41a7aaf7f6ff2
SSDEEP
768:SG+H+ucPnKkETLm7lCK2d4z3ns4zaXk3AftzJWOcfckmKKUGDdSrZ5Plxx5GXekl:WeucPKe7lCDWXs4za0G0cW5Z5q5xruu
Checks for missing Authenticode signature.
resource |
---|
3521477237898cff23d91357692e0a2e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DoMainWork
JamBanagd
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ