RunAs
SensNotifyNetconEvent
SensNotifyRasEvent
SensNotifyWinlogonEvent
ServiceMain
StartAs
Static task
static1
Behavioral task
behavioral1
Sample
529476e48b0405c4c2c9051ea71ceed4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
529476e48b0405c4c2c9051ea71ceed4_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
529476e48b0405c4c2c9051ea71ceed4_JaffaCakes118
Size
1.6MB
MD5
529476e48b0405c4c2c9051ea71ceed4
SHA1
4df452588dec3c35fc4c6da4f8e414add8e02e43
SHA256
3beaf3375b8f5a721eba1a6b53c1a18ff06192f1b58340a91973ba90b992d45d
SHA512
7c6e349cb89bbc401cbb32c5bf24a6c17be18b0aedac86fecd8da3bcdae6b6cb43ea440516723d53bdc511b4d855758f39211bec966adda6f40fab9c4ad41bee
SSDEEP
3072:1H8dK6lMb3mDTNmY2z9XHvv08o2HOTEDzGNZc0XXqC8ymjoymjm:1ck6ylHHvA2HOTGzGbc0KC806
Checks for missing Authenticode signature.
resource |
---|
529476e48b0405c4c2c9051ea71ceed4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
RunAs
SensNotifyNetconEvent
SensNotifyRasEvent
SensNotifyWinlogonEvent
ServiceMain
StartAs
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ