CoGetComCatalog
GetRPCSSInfo
INS
ServiceMain
WhichService
Static task
static1
Behavioral task
behavioral1
Sample
03abd2f738ee6e59ee9de7021ba1a206_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
03abd2f738ee6e59ee9de7021ba1a206_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
03abd2f738ee6e59ee9de7021ba1a206_JaffaCakes118
Size
27KB
MD5
03abd2f738ee6e59ee9de7021ba1a206
SHA1
539d835c912dc78582a6a07300b6711ce37fb8fb
SHA256
2abdfe1bef608efc7ab350a9b692238b00feaa5e7b8314d5970d1576cb6668d3
SHA512
cc081d04c702622e3b3c81afb04af77a3d65665be3995d8e916459de26d63dafdea57118677dc0a6ce98abf3dcdf7b1f89a45a733667e6dce6be43d5d92e725a
SSDEEP
384:unuE6qvqEO6BbR9fGgeZIT3H4NDMMJi20A:uusSF6BR9uh4INDMMY2b
Checks for missing Authenticode signature.
resource |
---|
03abd2f738ee6e59ee9de7021ba1a206_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
WaitForSingleObject
WriteFile
CreateFileA
LoadResource
SizeofResource
FindResourceA
lstrlenA
GetSystemDirectoryA
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
OpenProcess
GetCurrentProcessId
VirtualFreeEx
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
FindClose
CreateMutexA
lstrcpynA
lstrcpyA
lstrcmpA
FindFirstFileA
SetFileTime
GetFileTime
CreateThread
ReleaseMutex
FreeLibrary
CreateEventA
GetLastError
SetEvent
CloseHandle
DeleteFileA
Sleep
CopyFileA
FindNextFileA
GetModuleFileNameA
UnhookWindowsHookEx
SendMessageA
EnumWindows
GetWindowThreadProcessId
wsprintfA
SetWindowsHookExA
RegisterWindowMessageA
CallNextHookEx
RegSetValueExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
StrStrIA
PathFileExistsA
CoGetComCatalog
GetRPCSSInfo
INS
ServiceMain
WhichService
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ