ServiceMain
ServiceMainManual
Static task
static1
Behavioral task
behavioral1
Sample
47e6a190365f231aa175bdd5f9951e81_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
47e6a190365f231aa175bdd5f9951e81_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
47e6a190365f231aa175bdd5f9951e81_JaffaCakes118
Size
331KB
MD5
47e6a190365f231aa175bdd5f9951e81
SHA1
ea50f78e96bb2b4e12f632c4a4fa62b301eb91b6
SHA256
e60450cd0b2e8579be431b76aebeeac9140a49b01dad12dc4b4997c2e7748f30
SHA512
f0c03bb6151d75929ec800adf4402ee442adc3283c24f33f3a887bafac70205508ff2344a9d2647a2558741419b5c2074506563446b18b452c0dd178c58d0ac7
SSDEEP
3072:R0DJ4yl3ssyBPwzfYcN6kKOXmjN3dv5OP3JTd9NWeZ4EeVS/+tyUnx7JZsIHJ:ROJ4yl5C40cN6kKBBmBWeZ4EF/xUn
Checks for missing Authenticode signature.
resource |
---|
47e6a190365f231aa175bdd5f9951e81_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
LoadLibraryA
wsprintfA
MessageBoxA
ServiceMain
ServiceMainManual
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ