DllTSMain
ServiceMain
SetDIPC
TStartUp
Static task
static1
Behavioral task
behavioral1
Sample
77672943106e093d8685445531204e13_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
77672943106e093d8685445531204e13_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
77672943106e093d8685445531204e13_JaffaCakes118
Size
32KB
MD5
77672943106e093d8685445531204e13
SHA1
d35ad238957ea39e19df84b64e9b8677e03fe015
SHA256
2bbb8aa2b4ec3f2619bbec4219299e623647282c52000e4e95be54bd16a4045c
SHA512
71c4a484d80f012311e4156e80ff90f5d655feabe2eeec1578b1f249c9ad748055b40ecc866accb9d29d203f798e0552348ceff0c3c9d11af3d48a985c5ccb0a
SSDEEP
768:CobB1JhDt9cynDKQd0qGe9RaKw6PVnOhzFd4my8fVCxf4mc:xnJF0idGerap6PVO9L4my8fgh4F
Checks for missing Authenticode signature.
resource |
---|
77672943106e093d8685445531204e13_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualProtect
DllTSMain
ServiceMain
SetDIPC
TStartUp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE