ServiceMain
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
f8e6876bcd7bd2f99eb74f059065532c_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f8e6876bcd7bd2f99eb74f059065532c_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f8e6876bcd7bd2f99eb74f059065532c_JaffaCakes118
Size
10.1MB
MD5
f8e6876bcd7bd2f99eb74f059065532c
SHA1
8372100c83842bc622acb9e11ef9b44805928e06
SHA256
0ba228854490b6f49ca9e7eb555aca76a5e4b308654be2001519d15c6085d73f
SHA512
085990688fda987a113d196231f329f9824e55cb01ac212d76c9ac1a87696261543eebc5cbeb2e80395f48b77831018d2c0238bed9c864af9c3e94278063897e
SSDEEP
12288:5ynDeNtn6ITevl9/IVMNP4Iqt6tbczMaMSMWmEEJNyW:5ZSITevk+NAnt6BaMdWmE6NZ
Checks for missing Authenticode signature.
resource |
---|
f8e6876bcd7bd2f99eb74f059065532c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
SysAllocStringLen
GetVersionExW
GetVersion
FindNextFileA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
InitializeSecurityDescriptor
ServiceMain
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ