KAV
NOD32
ServiceMain
Update
Static task
static1
Behavioral task
behavioral1
Sample
43e3bd7ae9e4f9a470c50082176691d5_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
43e3bd7ae9e4f9a470c50082176691d5_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
43e3bd7ae9e4f9a470c50082176691d5_JaffaCakes118
Size
93KB
MD5
43e3bd7ae9e4f9a470c50082176691d5
SHA1
c09d49d4992cfedc4dddff024a78347236a954a8
SHA256
bc209a4543254377c714de29e4e82395fdc8603c3ac118be360a2312d84e8326
SHA512
ca5d79de8e2b2c426e380a4d1374f7c82bba42e264f699b99629fca60de1f3c5c5bf232698dd328faf01c6be90ce3c0f18d1604d39e72d95e1cca7e88b9c957b
SSDEEP
1536:+VpfMd5OtyW5kYJZIBeBzNZybCqlIAAM/Azg6hylLSZD4QS2kkYIWYcE1uDnT94B:ipfG5O9JJZZZybCqlIhA0aQQYcRT95mH
Checks for missing Authenticode signature.
resource |
---|
43e3bd7ae9e4f9a470c50082176691d5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetModuleHandleA
VirtualAlloc
GetProcAddress
CreateThread
FreeConsole
VirtualFree
Sleep
VirtualProtect
RegisterServiceCtrlHandlerA
SetServiceStatus
memcpy
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
wcstombs
strncpy
free
_initterm
malloc
_adjust_fdiv
KAV
NOD32
ServiceMain
Update
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ