InstallRT
InstallSA
PSLIST
ServiceMain
StartEXS
UMain
UninstallRT
UninstallSA
Static task
static1
Behavioral task
behavioral1
Sample
0df907abc988eea9f41147825337ab1f_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0df907abc988eea9f41147825337ab1f_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0df907abc988eea9f41147825337ab1f_JaffaCakes118
Size
86KB
MD5
0df907abc988eea9f41147825337ab1f
SHA1
6faedcb4f4e1590ae7cb85f196e9367f016a6d93
SHA256
695767f998d19217ae4fdeec5eb06c62d8d1ab63cd0eeaeea0fdd1b1bb254c6f
SHA512
05279c198d556da8ce865bb19a168dedd2535fbad5836b9ed99966c60f635d5406721c527391dc8bbe5618f30eeac81a03d92b5c8ff6e8baad5194b7e7bae060
SSDEEP
1536:SupIcpSxaKX8dmqc1II2yXSak2GYEzBdeA6eKFUOfEwhmDRAd1ljtsvw/LoqRTck:STaHjc6I2NKHTA6DUvnlAdjeqMOawTd
Checks for missing Authenticode signature.
resource |
---|
0df907abc988eea9f41147825337ab1f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree
wsprintfA
MessageBoxA
InstallRT
InstallSA
PSLIST
ServiceMain
StartEXS
UMain
UninstallRT
UninstallSA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ