DoMainService
MainService
MainWork
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
41b6ef0d4efeda42f7d9129044385cf7_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
41b6ef0d4efeda42f7d9129044385cf7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
41b6ef0d4efeda42f7d9129044385cf7_JaffaCakes118
Size
188KB
MD5
41b6ef0d4efeda42f7d9129044385cf7
SHA1
ba726dedd977ae20acd8d5bda43e29e9b6bc29ad
SHA256
46735405126c14237db767ff24c2e389bb4d0d8a6ad9d42bb7a4152d4eedaeed
SHA512
25449903220e162101a83df66b40b72cf0048008a4bee2948d6428c41583a279aae345534990f02770120c41a5b99227266039c8320094e144d10bf77bb8ebc2
SSDEEP
3072:DbdXw+XeRlUS3pZTjGsxNnEu+EOLBLtD/mNeI/2:DbdXwYe3UQpZGsxNnEi4VV/mNef
Checks for missing Authenticode signature.
resource |
---|
41b6ef0d4efeda42f7d9129044385cf7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DoMainService
MainService
MainWork
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ