terlockend
ServiceDo
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
ea76e8b028c3e1874e4827501cd34d80_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea76e8b028c3e1874e4827501cd34d80_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ea76e8b028c3e1874e4827501cd34d80_JaffaCakes118
Size
63KB
MD5
ea76e8b028c3e1874e4827501cd34d80
SHA1
6b693bc674fa45d93a7ceec7d057e91f5a031306
SHA256
19d550923606858fe880ccab1fbd8495c6ed2a2246c4b9c0dd9708002877ca83
SHA512
726117164c266f78b3df50d736514cba1244535f84295c0c7c53758e20808b3413247355b4f90ad526aa7da2c3e900c9ec889da57d94bcc74ef4fd0f06b3282c
SSDEEP
1536:r3i2PTb08WtL5I9l164GuQt9Swcu9eI6XcnkNZ/N:ryaA8WtL+gft9SrweI6XpNZ/N
Checks for missing Authenticode signature.
resource |
---|
ea76e8b028c3e1874e4827501cd34d80_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
ExitProcess
GetProcAddress
wsprintfA
MessageBoxA
terlockend
ServiceDo
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE