Terlockend
ServiceDo
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
b4f62abc0c1703a82cc05ced702097c2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b4f62abc0c1703a82cc05ced702097c2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b4f62abc0c1703a82cc05ced702097c2_JaffaCakes118
Size
58KB
MD5
b4f62abc0c1703a82cc05ced702097c2
SHA1
9af717ad870cb8b1c40bd284ecf3af0cee3a6786
SHA256
75dfeab04fa28616b7dae0334592e7023df88b1f17c5ee85465ca3bb37d12401
SHA512
885b5d9e7ccdb7741a6f74e085614845b3ff91ce0b5efeeb39379119c71171d21d7a55245fa0b7667bc5ea72bf4a956c1d94773bef96571e122a90cb0df17aac
SSDEEP
768:jEUs6lKOxyKfjkAG5Xqijth6UQIP9vqhVVxr+KtVqDkR1yjNM9/tubbeNtt5jubw:jPEOxyjP3jthL9CLnQ28jNMBtdNttVt
Checks for missing Authenticode signature.
resource |
---|
b4f62abc0c1703a82cc05ced702097c2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
ExitProcess
GetProcAddress
wsprintfA
MessageBoxA
Terlockend
ServiceDo
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE