BeginProc
EndProc
RunP
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
a84b8c60f1db5eab1408f6b31e29f440_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a84b8c60f1db5eab1408f6b31e29f440_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a84b8c60f1db5eab1408f6b31e29f440_JaffaCakes118
Size
109KB
MD5
a84b8c60f1db5eab1408f6b31e29f440
SHA1
08f831087e190977a8b49c76aa04f9193c1cf138
SHA256
691053893502343b2d21d56745bdcb38cf503e64efd623fb9d45c5d4a2df232e
SHA512
51dbd4b2f50b087217196d84312a277b3a7358a7206c4dbae24e422377b16df348bfb3d2c3b337847e9e84c784cff43e8b71ca6a34789f708bb14a5071c4242c
SSDEEP
1536:8dHKTy7VqilCn8YI6fw24cKau2f9d01Dd+NvxemHg:RTyRqi/YIV24Wug9d0v+lxemHg
Checks for missing Authenticode signature.
resource |
---|
a84b8c60f1db5eab1408f6b31e29f440_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
BeginProc
EndProc
RunP
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE