CsCreateClassStore
IID_IClassAdmin
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
4a13d87f18af155998308590e3a488e6_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4a13d87f18af155998308590e3a488e6_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
4a13d87f18af155998308590e3a488e6_JaffaCakes118
Size
111KB
MD5
4a13d87f18af155998308590e3a488e6
SHA1
9eda00aae384b2f9509fa48945ae820903912a90
SHA256
c322d10ef3aa532d4625f1c2589eae0f723208db37a7c7e81e4f07e36c3a537e
SHA512
2647fb1e91740d82746b33cf2ea7b946e4c4f98dcb3f8271db699b7a5ca0ba3c81542db2faf6ffb8ed16b1647ef422c3b8dc5e2be10ca75da3dfa61986b43fa8
SSDEEP
3072:1AP0ixvIH1cmbD8TeKuppT6D1CuDKxygELCPy5zwpi97:1AMywH1cHTruppT6D1C4KwF5cK
Checks for missing Authenticode signature.
resource |
---|
4a13d87f18af155998308590e3a488e6_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GlobalAlloc
GlobalFree
WTSGetActiveConsoleSessionId
LocalFree
Process32First
OpenProcess
Process32Next
CreateToolhelp32Snapshot
lstrcmpA
GetNativeSystemInfo
SetUnhandledExceptionFilter
GetSystemDefaultLCID
GetDriveTypeA
GetExitCodeProcess
CreateProcessA
ReadFile
GetStartupInfoA
GetLogicalDriveStringsA
GetLastError
GetExitCodeThread
CreatePipe
GetVersionExA
Sleep
WriteConsoleW
SetStdHandle
HeapReAlloc
GetModuleHandleA
GetModuleFileNameA
GetProcAddress
lstrcmpiA
GetSystemDirectoryA
GetSystemWow64DirectoryA
GetCurrentProcess
CreateThread
CreateEventA
WaitForSingleObject
lstrcpyA
DeleteFileA
CloseHandle
GetLocalTime
DisableThreadLibraryCalls
lstrcatA
WriteFile
lstrlenA
SetFilePointer
HeapSize
CreateFileW
SetEvent
GetStringTypeW
LCMapStringW
LoadLibraryW
LeaveCriticalSection
EnterCriticalSection
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FlushFileBuffers
FreeEnvironmentStringsW
DeleteCriticalSection
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
RtlUnwindEx
RtlPcToFileHeader
RaiseException
FlsAlloc
SetLastError
FlsFree
GetFileSize
CreateFileA
FlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameW
GetStdHandle
ExitProcess
GetModuleHandleW
HeapDestroy
HeapFree
HeapAlloc
MultiByteToWideChar
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
DecodePointer
EncodePointer
HeapSetInformation
GetVersion
HeapCreate
GetSystemMetrics
GetWindowDC
GetDesktopWindow
BitBlt
GetDeviceCaps
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
RegOpenKeyExA
SetServiceStatus
GetUserNameA
CreateProcessAsUserA
OpenProcessToken
RegCloseKey
RegisterServiceCtrlHandlerA
RegQueryValueExA
RegSetValueExA
GetTokenInformation
ConvertSidToStringSidA
SHGetSpecialFolderPathA
GetTcpTable
WTSQueryUserToken
closesocket
WSACleanup
WSAStartup
send
socket
recv
setsockopt
htons
inet_addr
gethostname
inet_ntoa
WSAGetLastError
ntohs
gethostbyname
connect
GdipCreateBitmapFromScan0
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipGetImageEncodersSize
GdipDisposeImage
GdiplusShutdown
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipGetImageEncoders
GdipSaveImageToFile
GdiplusStartup
GdipScaleWorldTransform
CertCloseStore
EncryptMessage
InitializeSecurityContextA
AcquireCredentialsHandleA
FreeContextBuffer
DecryptMessage
ApplyControlToken
DeleteSecurityContext
QueryContextAttributesA
FreeCredentialsHandle
CsCreateClassStore
IID_IClassAdmin
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ