ServiceMain
TStartUp
Static task
static1
Behavioral task
behavioral1
Sample
bbcb6d1358070a8e01739448dbd886f6_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bbcb6d1358070a8e01739448dbd886f6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bbcb6d1358070a8e01739448dbd886f6_JaffaCakes118
Size
27KB
MD5
bbcb6d1358070a8e01739448dbd886f6
SHA1
29a074f61475a10c558f27db52f63b929db4c93e
SHA256
71316d290fbe1d90172632fd80335be4413005802a00ff7b95a3cf74e0281477
SHA512
3ab743f91a4beed83536d10e3ad1fe58247e647bbd4491e1afaa50b6ec2df5be6a98c96945f9cf926923c33d34128f2476e74cf6a7fac8aba8bee121614f9bfb
SSDEEP
768:YJHtYDBP98CPn1UMHYvTzFVCSfEZyzXn/i9fl:YFtYtP95+M4JMZ4Xn/i9d
Checks for missing Authenticode signature.
resource |
---|
bbcb6d1358070a8e01739448dbd886f6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualProtect
ServiceMain
TStartUp
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE