ServiceMain
lmmz
Static task
static1
Behavioral task
behavioral1
Sample
681c8a0ecd3bf6c7d6af3ded19fbbf4a_JaffaCakes118.dll
Resource
win7-20240705-en
Target
681c8a0ecd3bf6c7d6af3ded19fbbf4a_JaffaCakes118
Size
48KB
MD5
681c8a0ecd3bf6c7d6af3ded19fbbf4a
SHA1
e45cc348ab13c3e6597fd8cc99a20e1e62e95b11
SHA256
1039b190c4c2fd1873596c2c0be646c3e68a558d5e71c0016561aae7ada58833
SHA512
144566f666d245707e147cf210459395a47838029110571e2c3e7968a7cf91aa3a00c2c4d1717526d670f45cf11179bae9ce0ccaf1c5e4eda766cad71fef3077
SSDEEP
1536:vhyfVfdwf0F4CVremKnTDMxXIc+esT86NXKUaPyA:5yfB80F4CAbToCyaC6A
Checks for missing Authenticode signature.
resource |
---|
681c8a0ecd3bf6c7d6af3ded19fbbf4a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ServiceMain
lmmz
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE