BeginProc
EndProc
RunP
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
b1aa45a542114160e7443a4ebe765fb6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b1aa45a542114160e7443a4ebe765fb6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b1aa45a542114160e7443a4ebe765fb6_JaffaCakes118
Size
113KB
MD5
b1aa45a542114160e7443a4ebe765fb6
SHA1
2a490fc1af05131c51f44978e6a897013bc18780
SHA256
3134896fb9c6692cd677a359adf57c08d8793e3dfdd583d54e9eca8ede0b015e
SHA512
06d8be56bb5d815175929b87d4d674aa5c6abd5aed216ad52c81bb0a966bff4f5051999defad67b2aa93ed80f353b5772a0eb72599b57ee0bb2b96c86cf66b46
SSDEEP
1536:1dHKTy7VqilCn8YI6fw24cKau2f9d01Dd+NvNemHZxJeYy:2TyRqi/YIV24Wug9d0v+lNemHZxJej
Checks for missing Authenticode signature.
resource |
---|
b1aa45a542114160e7443a4ebe765fb6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
BeginProc
EndProc
RunP
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE