DoService
DoShutdown
DoStartup
DoTest
Static task
static1
Behavioral task
behavioral1
Sample
ae259ea2657ba6fc59a18eb41144255e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ae259ea2657ba6fc59a18eb41144255e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ae259ea2657ba6fc59a18eb41144255e_JaffaCakes118
Size
52KB
MD5
ae259ea2657ba6fc59a18eb41144255e
SHA1
b33b269c6e50fdd2ddceb1a1723167c772697561
SHA256
0a03cccee0ed30c88b709ebc9b2102181c4ecaedbd123603f62e8ab0a5ec2c48
SHA512
b51043039cc832d7773d0544df9f15e0902ef503fffab867794579731a0843baefd93bcaab4c9334eed39f1de16d98b61fa75cd06eaa6f655fe893863e6ef008
SSDEEP
768:bpmYMDiv+IgqEh1szqbKIqLI9CNWNgP4BiIyQcZgCaue1GcdbJ2Ak:bpmYGhqA1sxLItcKxl1GcdEA
Checks for missing Authenticode signature.
resource |
---|
ae259ea2657ba6fc59a18eb41144255e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DoService
DoShutdown
DoStartup
DoTest
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ