ServiceMain
SocketProxyHelper
Static task
static1
Behavioral task
behavioral1
Sample
61662e0172fded420a087e66acd8ea43_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
61662e0172fded420a087e66acd8ea43_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
61662e0172fded420a087e66acd8ea43_JaffaCakes118
Size
55KB
MD5
61662e0172fded420a087e66acd8ea43
SHA1
b880bb7eb0e1560a7a1320dfc4be233f2dc35581
SHA256
a41e7282eb14517e9d55c92b88294b4ed7cb09286cd41bc1562caedb9a47022d
SHA512
bcdb1365bcf7bef8c80df84493249316806679540bb42728860e1b1f779185b1abb76d59a9054bd269e698769aad4d0ed0782f95e0bd543a91ef6b731fe64751
SSDEEP
768:79CdYDS5xBT95TVTODqBjJmlXA4cWaqzJvG9BJeThKa2e8XjkDRKm6h1OiAlO7P1:7qYDQTFRBtlzWaqF1v21hjaKP0
Checks for missing Authenticode signature.
resource |
---|
61662e0172fded420a087e66acd8ea43_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CreateThread
CloseHandle
GetProcAddress
VirtualAlloc
CreateFileW
ReadFile
GetProcessHeap
VirtualFree
HeapFree
HeapAlloc
Sleep
GetModuleHandleW
LoadLibraryW
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
EncodePointer
FlsGetValue
FlsFree
SetLastError
GetLastError
FlsAlloc
ExitProcess
DecodePointer
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
WriteFile
GetModuleFileNameW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize
RaiseException
RtlPcToFileHeader
CryptDestroyHash
CryptDecrypt
CryptDestroyKey
CryptCreateHash
CryptReleaseContext
CryptDeriveKey
CryptAcquireContextW
CryptHashData
ServiceMain
SocketProxyHelper
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ