DeinitServerExtension
InitServerExtension
ReflectiveLoader
Static task
static1
Behavioral task
behavioral1
Sample
1b5bf2ffaa4b3ab88c2da52f3ce66e37_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1b5bf2ffaa4b3ab88c2da52f3ce66e37_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
1b5bf2ffaa4b3ab88c2da52f3ce66e37_JaffaCakes118
Size
1.3MB
MD5
1b5bf2ffaa4b3ab88c2da52f3ce66e37
SHA1
4c10d94edc041666c30c779c8be42a1429a9bafe
SHA256
e2ae495646ea385fc30472067ce2942c98d8e5de90d080f5dcd9a546c2e17a83
SHA512
644a0bd031f75a64ee2a3c25b2c2f09ca46674be651717120940764fab60143c5a4b539c5051e92acb73874d46ca8c328df5dab5b254405c9ee8b838023e274e
SSDEEP
24576:l1Ea91phi0jr8maTFWHyJxLNMMvkTk3NUY/EgQ2F154:zLHImaTFWHyJxLNMMvkTk3NU532354
Checks for missing Authenticode signature.
resource |
---|
1b5bf2ffaa4b3ab88c2da52f3ce66e37_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
DeviceIoControl
SetFilePointerEx
CloseHandle
SetHandleInformation
GetNativeSystemInfo
CreatePipe
CreateProcessW
FindResourceW
GetTempPathW
ReadFile
GetFullPathNameW
CreateFileW
DeleteFileW
ExitProcess
SetUnhandledExceptionFilter
GetCurrentThreadId
ExitThread
OutputDebugStringA
WriteFile
GetStdHandle
SizeofResource
LoadResource
GetLastError
GlobalMemoryStatusEx
GetTempFileNameW
LockResource
RaiseException
FreeLibrary
GetProcAddress
LoadLibraryExA
EncodePointer
DecodePointer
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
RtlLookupFunctionEntry
RtlUnwindEx
GetCommandLineA
IsProcessorFeaturePresent
RtlPcToFileHeader
GetProcessHeap
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameW
IsDebuggerPresent
SetLastError
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LCMapStringW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
OutputDebugStringW
GetConsoleCP
GetConsoleMode
HeapReAlloc
HeapSize
GetStringTypeW
SetStdHandle
WriteConsoleW
FlushFileBuffers
OpenServiceW
OpenSCManagerW
DeleteService
CreateServiceW
ControlService
CloseServiceHandle
StartServiceW
DeinitServerExtension
InitServerExtension
ReflectiveLoader
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ