tgyhuji488
DoService
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
3cb81e567ac0f81ad98c879a1854aeca_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3cb81e567ac0f81ad98c879a1854aeca_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3cb81e567ac0f81ad98c879a1854aeca_JaffaCakes118
Size
120KB
MD5
3cb81e567ac0f81ad98c879a1854aeca
SHA1
b0e8e44d294f11213f36bc2610c21b6dbcb87199
SHA256
9346a240160e8abbae4d33e78ab74fcc5be3866efe396c959530c487403abb10
SHA512
65b4b578b4649dde11981f273c2995c8a4440ab72b9e1f6241512d5b29055df446b6dfe33e6df7337ddd3899bb09614e58eddf573b7eb6a98983ea4de82b13da
SSDEEP
1536:a+YYime2W+rAaEJCWf1uTh8P4Kd4dSr8Bh/pR4DC9WO:XYU79zgCWf1ud8AKchhR4DC9WO
Checks for missing Authenticode signature.
resource |
---|
3cb81e567ac0f81ad98c879a1854aeca_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
tgyhuji488
DoService
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE