FuckRising
SchedServiceMain
ServiceMain
SvchostEntry_W32Time
explore
Static task
static1
Behavioral task
behavioral1
Sample
aa54953e67b7766c309902656b258cf8_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
aa54953e67b7766c309902656b258cf8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
aa54953e67b7766c309902656b258cf8_JaffaCakes118
Size
41KB
MD5
aa54953e67b7766c309902656b258cf8
SHA1
2f01eb01a80b626a0c8293e940c2aa337be4254e
SHA256
f1d6caf5e11e5b9aaa133652d6fa11a206ec828878b986745404325258895513
SHA512
c48f999f49503aebfa72888fe251c08c1e55c1a31e3c44616b3e3bfc453165b181ffd08f5b0afd9827a76c8a9b63da6fed5282b890aa449cdc09a9e00c799576
SSDEEP
768:BiExdQ+foUTXNLPcqZtHwV2I/hGX/au24EdAj6RFXMqfVrBdrlno:Ac4yHwV2I/oFe26RF59Bo
Checks for missing Authenticode signature.
resource |
---|
aa54953e67b7766c309902656b258cf8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FuckRising
SchedServiceMain
ServiceMain
SvchostEntry_W32Time
explore
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ