gytfredwse
ServiceMain
rftgyhujk
Static task
static1
Behavioral task
behavioral1
Sample
11a4581e9b8df8ee4879cf76f848e323_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
11a4581e9b8df8ee4879cf76f848e323_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
11a4581e9b8df8ee4879cf76f848e323_JaffaCakes118
Size
132KB
MD5
11a4581e9b8df8ee4879cf76f848e323
SHA1
cdaca03cfd06d73837217df4991f780cd6c18750
SHA256
eca9e89e414485dbded38c757e860152a28af4b1dbf97d605d2effa24a653721
SHA512
5a7938c7a15c17a465595537cbfb2a00425c2c27d478556cc103c88b96916ae9d41cd661cd83cb87edf766f024821358b7ac4df3ff02688ed6acb56983fddf56
SSDEEP
1536:lFt6baQcgC+Im6O4cuI/0xOqcAmqAzg4SoTFOhr/X4qz8OputLNWGkWmrz2ErYjn:l76bBL5Kq0xOwMRSoGstLNsrz2ErYjn
Checks for missing Authenticode signature.
resource |
---|
11a4581e9b8df8ee4879cf76f848e323_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
gytfredwse
ServiceMain
rftgyhujk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE