InstallService
RundllInstallA
RundllUninstallA
ServiceMain
UninstallService
Static task
static1
Behavioral task
behavioral1
Sample
f26800dd26ddca6e1c668d47c847069f_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f26800dd26ddca6e1c668d47c847069f_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f26800dd26ddca6e1c668d47c847069f_JaffaCakes118
Size
48KB
MD5
f26800dd26ddca6e1c668d47c847069f
SHA1
5fd3aa0dc3d6a01a33391f0d1fe77606d9f0a53d
SHA256
2527d98ab326ef18a8a251d22382c17b76df87977ba2a36ac41c431d1d50f3e3
SHA512
3e4e5aad51d1dd4bec65d2f4f7e47d384e0deef6606ff606c3312721ae87dda740ee55f74c7d530c70c8d52a8ccf05c9d210192216e9f31321fd5d76e26637cb
SSDEEP
768:N+3I9hcxQWCTWk3+bKYjQtCPYh+ltatfA:I3zCTWk3+2PIltsfA
Checks for missing Authenticode signature.
resource |
---|
f26800dd26ddca6e1c668d47c847069f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetLastError
GetModuleFileNameA
CreateProcessA
GetLastError
FreeConsole
Sleep
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetFilePointer
HeapAlloc
GetCPInfo
VirtualAlloc
HeapReAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
GetStringTypeA
GetStringTypeW
MultiByteToWideChar
LCMapStringA
LCMapStringW
FlushFileBuffers
CloseHandle
RegSetValueExA
OpenServiceA
DeleteService
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenSCManagerA
CreateServiceA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegCreateKeyA
CloseServiceHandle
InstallService
RundllInstallA
RundllUninstallA
ServiceMain
UninstallService
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ