terlockend
ServiceDo
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
948f1825915ecc2b797953535c305825_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
948f1825915ecc2b797953535c305825_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
948f1825915ecc2b797953535c305825_JaffaCakes118
Size
63KB
MD5
948f1825915ecc2b797953535c305825
SHA1
616fda52ead8a9888c1ea351cdc91cdc3a3eeea5
SHA256
df381ee77e2161b658f7a460def42de4a25def5e698e6d8ba139fba9bad4a30b
SHA512
f93df345ef7b150f7e1489123b4675137b3859263b8388a6f45a90de834902b76947cbf59e32f8718a5788dca918987e6460b3450499ebab60f7a43cae3876cb
SSDEEP
1536:r3i2PTb08WtL5I9l164GuQt9Swcu9eI6XM+SZ/N:ryaA8WtL+gft9SrweI6XM+SZ/N
Checks for missing Authenticode signature.
resource |
---|
948f1825915ecc2b797953535c305825_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
ExitProcess
GetProcAddress
wsprintfA
MessageBoxA
terlockend
ServiceDo
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE