RunAs
SensNotifyNetconEvent
SensNotifyRasEvent
SensNotifyWinlogonEvent
ServiceMain
StartAs
Static task
static1
Behavioral task
behavioral1
Sample
09c6070e083cc7190322664663a29b18_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
09c6070e083cc7190322664663a29b18_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
09c6070e083cc7190322664663a29b18_JaffaCakes118
Size
3.2MB
MD5
09c6070e083cc7190322664663a29b18
SHA1
b28177e8c4b96d34c354698ee3b854c2ee427a40
SHA256
46b4610199d8f5d31ce5033091e88d4d4d34810cdabade5b42c7a364eda7cbfa
SHA512
cc7908b74ed06fbdd848110b574b9b39b1c11579dab189556f3305904b6a877cabc6cf2a04dec7a462fb91d30def3534efc88cfa49b7970b2441843921d28e4e
SSDEEP
3072:Oc8d7JiFHPiQzTYWT9eodH4MiEzhl5pa9LLBSMH3HKRucQXlHbj:ApwxuoOMTlm9LL1H3HBcs
Checks for missing Authenticode signature.
resource |
---|
09c6070e083cc7190322664663a29b18_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
RunAs
SensNotifyNetconEvent
SensNotifyRasEvent
SensNotifyWinlogonEvent
ServiceMain
StartAs
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ