ClientMain
DelFilex
Install
ServiceMain
Unstallx
UpdateX
Static task
static1
Behavioral task
behavioral1
Sample
5cbd85a2376515fb384df9667d0551e7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5cbd85a2376515fb384df9667d0551e7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5cbd85a2376515fb384df9667d0551e7_JaffaCakes118
Size
152KB
MD5
5cbd85a2376515fb384df9667d0551e7
SHA1
fc2e6586390c1280a0a02fece7fbb6719a357fb0
SHA256
0ba1014d8cd96dda578e0c69754eb37364c24b7b249c0cd63e1f3d60c9fab36a
SHA512
d927c0e344f47de4a9daa5b6a6a84630446981c8a7d9413f78ae3474090d449fa8c3f9ca07af00b89f9726f3b07664e0f5aeb6ca09186711434b65d73330ecee
SSDEEP
3072:ot5+oYp8Qqlb9eUWPiwxyNw7/4H6bvLEO:ot5+oYpWxRWqwxyNw7/4Hd
Checks for missing Authenticode signature.
resource |
---|
5cbd85a2376515fb384df9667d0551e7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ClientMain
DelFilex
Install
ServiceMain
Unstallx
UpdateX
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ