DoService
ServiceMain
DoMainWork
Static task
static1
Behavioral task
behavioral1
Sample
63e376be4be4c7336afd1396a03f0b9e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63e376be4be4c7336afd1396a03f0b9e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
63e376be4be4c7336afd1396a03f0b9e_JaffaCakes118
Size
89KB
MD5
63e376be4be4c7336afd1396a03f0b9e
SHA1
6350c08e679c62ac75bbec1f2ad406d70b624d2d
SHA256
cf47b37ecefa42b4918ef7cd7c8209ae566e1a429a2fb1d8cf3cd0ef3cb85d99
SHA512
c2df9d1529ec7642547b87c429e9cb2aeb9749c3890d3601bd7fd23b1865b425cc2e4d420ba8421fd4e8ed88cfef3a83c894a45703623b0c8c338cd554fe9a54
SSDEEP
1536:FcuIUcgCvI+KOocuI/Gum5Cjmp/g4TotPOhr/nyyoboYUpA:uuIcOxaqGum5nRToJUpA
Checks for missing Authenticode signature.
resource |
---|
63e376be4be4c7336afd1396a03f0b9e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DoService
ServiceMain
DoMainWork
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE