ServiceMain
\wK}jnq{}
DoMainWork
Static task
static1
Behavioral task
behavioral1
Sample
9579c9961f705bdd21590bc0f765a799_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
9579c9961f705bdd21590bc0f765a799_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
9579c9961f705bdd21590bc0f765a799_JaffaCakes118
Size
93KB
MD5
9579c9961f705bdd21590bc0f765a799
SHA1
5c1824659035f0e123067d2075d7365028e453c9
SHA256
df280e51dec75b63ed6dcb18dfd7ffc20a9a0a52e4542c7a7fc5628b841940a1
SHA512
2c8abf209a566d0d95074fc6fe5abe5c3803032052a1d4bd8d7c49af1dab927e3fd994b022c8825bcf15965f83cce5441fca692bdf9c285155246528f3b7f2dd
SSDEEP
1536:ky3pncgOrIFOOicuI/RYDpQWPabX4RfqydGr/iqMBKoYnj06zM0NzZ:t3pVyooqRYDp2IRf+MBenoAL
Checks for missing Authenticode signature.
resource |
---|
9579c9961f705bdd21590bc0f765a799_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
\wK}jnq{}
DoMainWork
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ