RunAs
SensNotifyNetconEvent
SensNotifyRasEvent
SensNotifyWinlogonEvent
ServiceMain
StartAs
Static task
static1
Behavioral task
behavioral1
Sample
01de6b549881d64c54eabc0c6ad656a9_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
01de6b549881d64c54eabc0c6ad656a9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
01de6b549881d64c54eabc0c6ad656a9_JaffaCakes118
Size
1.8MB
MD5
01de6b549881d64c54eabc0c6ad656a9
SHA1
19e828238e7c25ee0e59107e4af8b04e07e684ff
SHA256
0498c3a748951277ed7c599f44a7a106a68ecf7a33afa8843b77578e95fedd27
SHA512
4540ee96e46b95c53c8f434fc9652d9eb5927924c0f8811a880fa5b85cd959ff91f23805ca0f546155dd7cd44311950ce89e8e4ae1bcc7d1502053c39993e759
SSDEEP
3072:1H8dK6lMb3mDTNmY2z9XHvv08o2HOTEDzGNZc0XXqC8ymjoymjm:1ck6ylHHvA2HOTGzGbc0KC806
Checks for missing Authenticode signature.
resource |
---|
01de6b549881d64c54eabc0c6ad656a9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
RunAs
SensNotifyNetconEvent
SensNotifyRasEvent
SensNotifyWinlogonEvent
ServiceMain
StartAs
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ