ServiceMain
TStartUp
Static task
static1
Behavioral task
behavioral1
Sample
706c57b5010c36ae7fcbb6a471cf5aa9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
706c57b5010c36ae7fcbb6a471cf5aa9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
706c57b5010c36ae7fcbb6a471cf5aa9_JaffaCakes118
Size
27KB
MD5
706c57b5010c36ae7fcbb6a471cf5aa9
SHA1
4705f95ef01c669e8841f906dd2ed84106f7bc59
SHA256
1730eae8df526f53fa6cf96010abe4b31176325913558c93f0c1b8da7087a78c
SHA512
c0c38d55b101aca5d544d07ab14c1683d8fa1edda389800600d9d1a3c6cb6d131ba981e348af287f2d8f54db0f803723816c7fb0a43e37b67c096b3435c6f921
SSDEEP
768:PIW5Q2aLEr3f1ZJc7vGDJ+xqYRk8ud+JlUk6:gWuEr3tZO7YJ+xMt+JOh
Checks for missing Authenticode signature.
resource |
---|
706c57b5010c36ae7fcbb6a471cf5aa9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualProtect
ServiceMain
TStartUp
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE