Terlockend
ServiceDo
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
ab0cd132037f1efd64ec3fe8e1636a5f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ab0cd132037f1efd64ec3fe8e1636a5f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ab0cd132037f1efd64ec3fe8e1636a5f_JaffaCakes118
Size
58KB
MD5
ab0cd132037f1efd64ec3fe8e1636a5f
SHA1
8a483ed336751f1052ff64754c925504111fcc78
SHA256
a9ac52af4c23e2f0186c4220ec7eed057f8619cdb45a9ab5221e81ac9a13fde9
SHA512
0fdc17e815bb66f70428766c03a19a63627df23722d279d81a1fae5cafc428bd616a5a1a05f284f80aa8ca5b96afd4dd5fc505be38b109cd28fc7520a802d43a
SSDEEP
768:jEUs6lKOxyKfjkAG5Xqijth6UQIP9vqhVVxr+KtVqDkR1yRHEbLbgs/s:jPEOxyjP3jthL9CLnQ28RHEbgs/s
Checks for missing Authenticode signature.
resource |
---|
ab0cd132037f1efd64ec3fe8e1636a5f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
ExitProcess
GetProcAddress
wsprintfA
MessageBoxA
Terlockend
ServiceDo
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE