ServiceMain
\wK}jnq{}
DoMainWork
Static task
static1
Behavioral task
behavioral1
Sample
da17a79e9b973f430516eef78a3b34f3_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
da17a79e9b973f430516eef78a3b34f3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
da17a79e9b973f430516eef78a3b34f3_JaffaCakes118
Size
93KB
MD5
da17a79e9b973f430516eef78a3b34f3
SHA1
b4b9c5bbdab517496e9d61be4463c2c8d7211d9f
SHA256
f28932557b72fbb2052baa65ea015f161347f9a49f492d294e962988b29a86f5
SHA512
af879e31a0ad78b0d216956071944d0d7149f17003cd2ede8f265b5781c681079affb2a096e52d666fc17c8c174be79866a0faa6e9a84670d06d329826bd3060
SSDEEP
1536:ky3pncgOrIFOOicuI/RYDpQWPabX4RfqydGr/iqMBKoYBb8:t3pVyooqRYDp2IRf+MBeW
Checks for missing Authenticode signature.
resource |
---|
da17a79e9b973f430516eef78a3b34f3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
\wK}jnq{}
DoMainWork
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ