ReadCFG
ServiceMain
StartMain
Stop
Static task
static1
Behavioral task
behavioral1
Sample
8888954c40f2c58c49b4904ab7301f63_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8888954c40f2c58c49b4904ab7301f63_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8888954c40f2c58c49b4904ab7301f63_JaffaCakes118
Size
115KB
MD5
8888954c40f2c58c49b4904ab7301f63
SHA1
1bbc4033ec58f2b9d7a184c2186616b1bc086d7b
SHA256
734c476857247ec37ff01d8bd9953bf2213517e517cb69649536edc3e18f5928
SHA512
b478259b52b5ab126eb655390a5ad76c7952688ba9c5a3ad05aa0138c0f48757d02879432dcd487a3e95ae104feda43f08d808128dd81a630806beb0faa0b798
SSDEEP
1536:/y07a/EoaKaqPbpzYHrbIdt6xLh2bGO2WwFbwI37QBoFw8vEm5KI3eWMZaPeOpj6:/yXEy5b6HIdApbtFbB3sivEfC/PPz16
Checks for missing Authenticode signature.
resource |
---|
8888954c40f2c58c49b4904ab7301f63_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ReadCFG
ServiceMain
StartMain
Stop
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ