ServiceMain
\wK}jnq{}
DoMainWork
Static task
static1
Behavioral task
behavioral1
Sample
d11e1a918dbf12fa3810960dd3b48613_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d11e1a918dbf12fa3810960dd3b48613_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d11e1a918dbf12fa3810960dd3b48613_JaffaCakes118
Size
93KB
MD5
d11e1a918dbf12fa3810960dd3b48613
SHA1
0f51203154845e0d3f03a208e39a3e6d334d2161
SHA256
b3ed1275ec52137cfdabbe985e624bd78608de3e9c329bbcec8194a01a947b0f
SHA512
e292a2ea9cb926cffc83f8c389707c478fd27cdc0d2581125ded127152fda72058817a0f8934cc591043af73c8c47ca479cf08b1188b4ce4eaacb6c3d2cf5da0
SSDEEP
1536:ky3pncgOrIFOOicuI/RYDpQWPabX4RfqydGr/iqMBKoY7a:t3pVyooqRYDp2IRf+MBeG
Checks for missing Authenticode signature.
resource |
---|
d11e1a918dbf12fa3810960dd3b48613_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
\wK}jnq{}
DoMainWork
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ