Terlockend
ServiceDo
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
faca99c2a38437b1d55490a01c6d633d_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
faca99c2a38437b1d55490a01c6d633d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
faca99c2a38437b1d55490a01c6d633d_JaffaCakes118
Size
58KB
MD5
faca99c2a38437b1d55490a01c6d633d
SHA1
8ae7e3601fc756e4e2639516931958b8162220b2
SHA256
2a303893de9b7a60a7802dc48fcbe79d560ecafa2105d30aa818a880a0a84772
SHA512
953159de583c985590798dd298971ffaef575eb4f40248b9929f789ba82877d44ef49c88a063d2fed565305db9b85d16f0efb17e7fe447e6afb6fde30f2f90a8
SSDEEP
768:jEUs6lKOxyKfjkAG5Xqijth6UQIP9vqhVVxr+KtVqDkR1yxOt43LWH9w7:jPEOxyjP3jthL9CLnQ28ktFH+
Checks for missing Authenticode signature.
resource |
---|
faca99c2a38437b1d55490a01c6d633d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
ExitProcess
GetProcAddress
wsprintfA
MessageBoxA
Terlockend
ServiceDo
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE