Service1
Service2
Service3
Service4
Service5
Behavioral task
behavioral1
Sample
17c3cd43d0a7b4515f5c39bcd3f3b5f7_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
17c3cd43d0a7b4515f5c39bcd3f3b5f7_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
17c3cd43d0a7b4515f5c39bcd3f3b5f7_JaffaCakes118
Size
53KB
MD5
17c3cd43d0a7b4515f5c39bcd3f3b5f7
SHA1
ff35ae27ffe30aeb04fa34bf061de0cc0260194b
SHA256
5b4e6de9ff09b2d17381ce2386adc0b88d84a178f2d2445dd255f015420650b5
SHA512
4e30a2b58e947fb5be7ca1a894334784aa04990997247421db6a911857591b47388d22e90cbe160adde963b6bedf6de4bd1fb0b985ef0afcab0d7eebe386b10f
SSDEEP
768:wVsESM78jKIEKDYXofrOfWtmH3y7FJmw08T7rflwNTKdCODFg:wWEujP/r9mH3MmwprflM2dA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
17c3cd43d0a7b4515f5c39bcd3f3b5f7_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
GetModuleFileNameA
GetModuleHandleW
GetLocalTime
GetLastError
CreateEventA
ExitProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
OpenProcess
UnmapViewOfFile
MapViewOfFile
GetFileSize
CreateFileMappingA
CreateFileA
CreateRemoteThread
GetModuleHandleA
CopyFileA
SetThreadPriority
ReadFile
GetSystemDirectoryW
lstrcmpiW
GetModuleFileNameW
WriteFile
IsBadWritePtr
LockResource
SizeofResource
LoadResource
FindResourceA
DeviceIoControl
CreateFileW
DuplicateHandle
LoadLibraryExA
GetVersionExA
SetEndOfFile
SetFilePointer
SetFileAttributesA
GetTempPathA
GetLongPathNameA
GetTickCount
OutputDebugStringA
GetStartupInfoA
CreateProcessA
WaitForSingleObject
CloseHandle
LoadLibraryA
InitializeCriticalSection
GlobalFree
LoadLibraryW
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
DeleteFileA
IsDebuggerPresent
LookupPrivilegeValueA
CloseServiceHandle
RegSetValueExA
RegQueryValueExA
RegCloseKey
ControlService
DeleteService
OpenSCManagerA
OpenServiceA
CreateServiceA
StartServiceA
RegOpenKeyExA
RegCreateKeyExA
SetServiceStatus
RegisterServiceCtrlHandlerW
AdjustTokenPrivileges
NtQueryObject
RtlEqualUnicodeString
RtlInitUnicodeString
_strcmpi
NtQuerySystemInformation
wsprintfW
wsprintfA
Service1
Service2
Service3
Service4
Service5
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE