DoMainWork
DoServiCE
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
d98babea9ce32cf3b3288f1a6909f21b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d98babea9ce32cf3b3288f1a6909f21b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d98babea9ce32cf3b3288f1a6909f21b_JaffaCakes118
Size
177KB
MD5
d98babea9ce32cf3b3288f1a6909f21b
SHA1
6f5adc30b5d69028113a9eaccbcea12a5cccf3e5
SHA256
22f44153904cf2c855a4afb94ed5f772fa63a241532f3509ff829d631ff10065
SHA512
f754748be6aee7fc757a93c16fc365229c2523d82a04a63bebc176d08410c8a7a473893a19f2073908751c300d16b619c08a7423a0fe8a82cf192f18d7c4b7c4
SSDEEP
3072:S7npgzCXpkJlhNQOqtYMo818lzAibjFY5HYD1oEueWv6mJYqYE9C4Tx:SdgzEshXfMPmlzAibjFWDEugmqqYElT
Checks for missing Authenticode signature.
resource |
---|
d98babea9ce32cf3b3288f1a6909f21b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DoMainWork
DoServiCE
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ