RunAs
SensNotifyNetconEvent
SensNotifyRasEvent
SensNotifyWinlogonEvent
ServiceMain
StartAs
Static task
static1
Behavioral task
behavioral1
Sample
eeb18d845c70826a2ad1947188c2b7c0_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eeb18d845c70826a2ad1947188c2b7c0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
eeb18d845c70826a2ad1947188c2b7c0_JaffaCakes118
Size
1.8MB
MD5
eeb18d845c70826a2ad1947188c2b7c0
SHA1
ac9dd39d9679cd76901ac4a6ab2d88e4a07626dd
SHA256
a2a4140a313ac4d3578ac5a56ae3a324e72acc0eb61faac8dee200e8990f1a4b
SHA512
87897b5ed415b29713fe467251dc9f85d298a3c29da7a83bdc044f2281fc8e76e05c582fa7aab1002f63f3e15a7c84872051da6543869318ce40989256104abf
SSDEEP
3072:S893TSKfW509O4mD9XC6GnOk/elS5i82EZXSsincTGdsQ7FjVsF:d1mjZH1fg5i+XSsycTGS
Checks for missing Authenticode signature.
resource |
---|
eeb18d845c70826a2ad1947188c2b7c0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RunAs
SensNotifyNetconEvent
SensNotifyRasEvent
SensNotifyWinlogonEvent
ServiceMain
StartAs
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ