RunAs
SensNotifyNetconEvent
SensNotifyRasEvent
SensNotifyWinlogonEvent
ServiceMain
StartAs
Static task
static1
Behavioral task
behavioral1
Sample
41b15bcd31a421132f838608924dac04_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
41b15bcd31a421132f838608924dac04_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
41b15bcd31a421132f838608924dac04_JaffaCakes118
Size
159KB
MD5
41b15bcd31a421132f838608924dac04
SHA1
68452f45e04725d180c1c5bd1eab3e0d259a2f29
SHA256
1caf1fb4e5e27c69f33371f042d84b32978193c5c9cbc4f4c666cf601773a604
SHA512
caed994747380ddaf7b9dd2a71e16e5723237352901faa56d3fabc3d0dfb9f7080e2d70498e1805ebb3707966d6139c7c1b4b43e1c4610df0d31013768628f16
SSDEEP
3072:1H8dK6lMb3mDTNmY2z9XHvv08o2HOTEDzGNZc0XXqC8ymj:1ck6ylHHvA2HOTGzGbc0KC8
Checks for missing Authenticode signature.
resource |
---|
41b15bcd31a421132f838608924dac04_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
RunAs
SensNotifyNetconEvent
SensNotifyRasEvent
SensNotifyWinlogonEvent
ServiceMain
StartAs
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ