ServiceMain
\wK}jnq{}
DoMainWork
Static task
static1
Behavioral task
behavioral1
Sample
85bb6c6fc48e237cbe20392a95fa3df7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
85bb6c6fc48e237cbe20392a95fa3df7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
85bb6c6fc48e237cbe20392a95fa3df7_JaffaCakes118
Size
93KB
MD5
85bb6c6fc48e237cbe20392a95fa3df7
SHA1
95c8b4e7d9a3697925c41872421e1479b7df5904
SHA256
8fcf9500be862b6d3e0d2e468a41e5b530accbc31ab9f11eb017f4c20d920c0a
SHA512
9a92b8c2d03d1d1bba7723212e22586a0b6a17e5e54b76ec0a652cb02a66078c0db38ecaa30151b0b6d50bcb9f01526c509b67a26b91624129ac6cba22adf299
SSDEEP
1536:ky3pncgOrIFOOicuI/RYDpQWPabX4RfqydGr/iqMBKoYHWTmiO6:t3pVyooqRYDp2IRf+MBeHnj6
Checks for missing Authenticode signature.
resource |
---|
85bb6c6fc48e237cbe20392a95fa3df7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
\wK}jnq{}
DoMainWork
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ