ServiceMain
TStartUp
Static task
static1
Behavioral task
behavioral1
Sample
b15dcc5c5a8d4268940ccce06922b263_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b15dcc5c5a8d4268940ccce06922b263_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b15dcc5c5a8d4268940ccce06922b263_JaffaCakes118
Size
27KB
MD5
b15dcc5c5a8d4268940ccce06922b263
SHA1
6601bc7acdc79749ef5d5b189bcfa3fa571b3142
SHA256
19395f3d3f6bcbd2ae4cd987220bb0b81ad5bd44bfa70b11dff1fc4889ee1d43
SHA512
5c86439af2963dee781f387d454479ba310de23dc9f22f28d746f9bc2ddb78d9e2e2dc9dc0a3784d968b99dcdea1da6daf1b1cde2ccb41faf16aad8b12f764a4
SSDEEP
768:ftwvVWYONTo1gZlmouQg+aVWN1AKey007SXocqfowil3rpk91k:1aWYWoK7uD+mWLcylS401lbpk91k
Checks for missing Authenticode signature.
resource |
---|
b15dcc5c5a8d4268940ccce06922b263_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualProtect
WinExec
SendMessageA
MoveWindow
FindWindowA
UpdateWindow
ServiceMain
TStartUp
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE