ServiceMain
uuuuuuuuuuuu
yyyyyyyyyyy
Static task
static1
Behavioral task
behavioral1
Sample
74cef1ede121258414dcba6069ea9de7_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
74cef1ede121258414dcba6069ea9de7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
74cef1ede121258414dcba6069ea9de7_JaffaCakes118
Size
170KB
MD5
74cef1ede121258414dcba6069ea9de7
SHA1
822711537c0a9daa7a4c8774beb41e8ea22eb029
SHA256
8d559d33fb4d24fe674aaeb349bc273c37967a92f3ed9a9d31ec7ce7a94eb048
SHA512
954958930effb0b2cbd5b450d6189728ff7141594784e900f1df43901e304a7c5b268ec55c3b59b237564f6a56134bd293de05b5f3f9f05a8223d6d75ea6041f
SSDEEP
3072:7t5xuIutjKko/NspQwLDvjjXBcXrvWDjShbl92NRaHFmsS6C4IMkD/B+StQuvUSE:xNut/mNzoDLjXcqGETs+DZN+u3MZt9
Checks for missing Authenticode signature.
resource |
---|
74cef1ede121258414dcba6069ea9de7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateEventA
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
strrchr
?_Xran@std@@YAXXZ
ICClose
MessageBoxA
ServiceMain
uuuuuuuuuuuu
yyyyyyyyyyy
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ