InstallRT
InstallSA
PSLIST
ServiceMain
StartEXS
UMain
UninstallRT
UninstallSA
Static task
static1
Behavioral task
behavioral1
Sample
dfe20134475ef21159fe30960b95fb61_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dfe20134475ef21159fe30960b95fb61_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dfe20134475ef21159fe30960b95fb61_JaffaCakes118
Size
515KB
MD5
dfe20134475ef21159fe30960b95fb61
SHA1
5a8b93beac2d0998bec041814a8e112d06ece50b
SHA256
faf50a41e3db0ba4b6430b907ab18371c110557e87200a991c036a763ef40f66
SHA512
6313ebb0a8251cb9456bf3dfcb93c1ed741053131d1020ac4c7a0d2d37c71c3e26b951ea45dfb7d94d8e6c230c1b23d46437987ac146298cdbe0ad62d1891e7b
SSDEEP
12288:WigdXtSbItfQ2F8DydaZuValCzaiPUM6E0cvQ:ZgdXtS4fzF8DywZHkzarMJ0cvQ
Checks for missing Authenticode signature.
resource |
---|
dfe20134475ef21159fe30960b95fb61_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallRT
InstallSA
PSLIST
ServiceMain
StartEXS
UMain
UninstallRT
UninstallSA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ