RunAs
SensNotifyNetconEvent
SensNotifyRasEvent
SensNotifyWinlogonEvent
ServiceMain
StartAs
Static task
static1
Behavioral task
behavioral1
Sample
1276de127ffe09fb259e6fa3fe95cced_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1276de127ffe09fb259e6fa3fe95cced_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
1276de127ffe09fb259e6fa3fe95cced_JaffaCakes118
Size
1.9MB
MD5
1276de127ffe09fb259e6fa3fe95cced
SHA1
3bd68d4cf24dd5829055651be9a719c1484a4c7e
SHA256
2126432b5016f477269c471db5d1cde677d78f9b46b946b85fb3744b9143e4d3
SHA512
eb2154089733f87abda07c57084cec09ea8f7b7ced248a1f6ee793534283b937071340b559df0e4c8407c5ab6b4867cacdd1ee4c16c3b53c6396f8728bcdc638
SSDEEP
3072:Oc8d7JiFHPiQzTYWT9eodH4MiEzhl5pa9LLBSMH3HKRucQXlHbjQbj:ApwxuoOMTlm9LL1H3HBcs
Checks for missing Authenticode signature.
resource |
---|
1276de127ffe09fb259e6fa3fe95cced_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
RunAs
SensNotifyNetconEvent
SensNotifyRasEvent
SensNotifyWinlogonEvent
ServiceMain
StartAs
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ