RunAs
SensNotifyNetconEvent
SensNotifyRasEvent
SensNotifyWinlogonEvent
ServiceMain
StartAs
Static task
static1
Behavioral task
behavioral1
Sample
405b8bf9faf7792fbe3537894f9024a1_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
405b8bf9faf7792fbe3537894f9024a1_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
405b8bf9faf7792fbe3537894f9024a1_JaffaCakes118
Size
1.8MB
MD5
405b8bf9faf7792fbe3537894f9024a1
SHA1
bfab9d069a07583b73a3a2060ea1abe28ad9b50e
SHA256
f5b10e17e8337fb176c5ac22c711296baf7d9accdf032107b43e5a0cc2878e94
SHA512
811c29f16bd7cca7e29c992c7393fda77abb2bb46e7aadfe6067f74f3538a747cf3360c62d771a17ae86d27fc6a1d4f054522e7d197711c1f7fa8c31ce937fe3
SSDEEP
3072:Oc8d7JiFHPiQzTYWT9eodH4MiEzhl5pa9LLBSMH3HKRucQXlHbjcbj:ApwxuoOMTlm9LL1H3HBcs
Checks for missing Authenticode signature.
resource |
---|
405b8bf9faf7792fbe3537894f9024a1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
RunAs
SensNotifyNetconEvent
SensNotifyRasEvent
SensNotifyWinlogonEvent
ServiceMain
StartAs
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ