ServiceMain
bfg_Entry
Static task
static1
Behavioral task
behavioral1
Sample
5e8d0a7aa0f6803196118e1d7f4d6f49_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5e8d0a7aa0f6803196118e1d7f4d6f49_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5e8d0a7aa0f6803196118e1d7f4d6f49_JaffaCakes118
Size
204KB
MD5
5e8d0a7aa0f6803196118e1d7f4d6f49
SHA1
36afcf1680040ca188bbd8dfb86b7406f58cec8c
SHA256
6e995eb03cf971bbd64a50d6f4cbba724a5c15437b0665eb74e3f7eea27f2fce
SHA512
7a11302d726c715429eca72c218500ed99d46b9804b010a47a5ebf6be9e88ef3c7091b3a1959f3295425d496dd78bec26ffc587a1d56dd9acabd41e28c62f0fa
SSDEEP
3072:82bnxWI5H1g0i6pKDy91Pp+IOSbITrseUN/LPcrqZvgShQIBoZQVvBYaENMh0hQt:1Tk6yV61ncClfhQIB611q
Checks for missing Authenticode signature.
resource |
---|
5e8d0a7aa0f6803196118e1d7f4d6f49_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ServiceMain
bfg_Entry
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ