ServiceMain
\wK}jnq{}
DoMainWork
Static task
static1
Behavioral task
behavioral1
Sample
63e43b0f777bc7d5f9fd888acc802273_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63e43b0f777bc7d5f9fd888acc802273_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
63e43b0f777bc7d5f9fd888acc802273_JaffaCakes118
Size
93KB
MD5
63e43b0f777bc7d5f9fd888acc802273
SHA1
4e02e46df7224d0055d6333dd642f14f4667dbb2
SHA256
fdf7a756bc2ae7d5554be455425f9a0c05a7533c948456e68c5e3784f8bba8a8
SHA512
82d7387697115befbbe8f4cc93c4352c78f8ac1b69e7e2a0612d8773bb314d4335a16809f822d894d3b0e240242f97d06e7c898d0457fe4a7a45e79db080b1d4
SSDEEP
1536:kyTr/cgO/IFOOicuI/NYDpEWPazX4RfmCdGr/C+MB/oYVveove2:tTrtOooqNYDpqIRfOMBhVveove2
Checks for missing Authenticode signature.
resource |
---|
63e43b0f777bc7d5f9fd888acc802273_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
\wK}jnq{}
DoMainWork
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ