AutorunThread
DeleteServiceByName
GetCurDoc
InitHook
RandomDw
SaveToFileH
XorByStr
Static task
static1
Behavioral task
behavioral1
Sample
875f0b65fed21635da261206f2f3c67a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
875f0b65fed21635da261206f2f3c67a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
875f0b65fed21635da261206f2f3c67a_JaffaCakes118
Size
28KB
MD5
875f0b65fed21635da261206f2f3c67a
SHA1
f78eb3c43019ba144af78c057573970ed0687835
SHA256
d0ece9fe57037497440ca350272764c6100797a7a1ebaafd4b2b1f981f9dfb9d
SHA512
a6d95a74f7a98b469328205af12dafba3b87ffd6f49637cca59d191802f469c5eb926923feee0160d06748b054eea166f04b922aa79f582a30006b5178155970
SSDEEP
384:rqFVDz6bErWuw8ZJxFWsvkLrQkQT5YM/BVQdVDxfNPHPPsNFOhYe8pHWM4+lD9Zy:rqFR6uBkrrwKM/BVQJBsNFAWFzvqI
Checks for missing Authenticode signature.
resource |
---|
875f0b65fed21635da261206f2f3c67a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AutorunThread
DeleteServiceByName
GetCurDoc
InitHook
RandomDw
SaveToFileH
XorByStr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ