ServiceRouteEx
StartServiceEx
StopServiceEx
Static task
static1
Behavioral task
behavioral1
Sample
17cf87eadfb62f55ff2f13c670e13375_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
17cf87eadfb62f55ff2f13c670e13375_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
17cf87eadfb62f55ff2f13c670e13375_JaffaCakes118
Size
14KB
MD5
17cf87eadfb62f55ff2f13c670e13375
SHA1
3933b1c433b2ad3e4ac37bb86412b5b284ab1cb2
SHA256
082a998a91cd1ea2d276c6adb522df18eb02ab865c8c8de080b1db94f6f482e8
SHA512
f511cbfc23eb9eb956e6554c48f1546d119a340e679abfe83cfab0693cd2921c674e0715c6aa64da88c44c0c03568f03dc57bd6c216951b27f2ded317397e1c1
SSDEEP
192:9lUunf7VWV4ff1w9mYqilw1liZuBBQ6PRQkLzA7ZS2zhIHW:Yun8V4bbiu1yuBBQARQky82I
Checks for missing Authenticode signature.
resource |
---|
17cf87eadfb62f55ff2f13c670e13375_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
strlen
memcpy
memcmp
RtlZeroMemory
gethostname
lstrcatA
lstrcmpiA
WritePrivateProfileStringA
WaitForSingleObject
TerminateThread
Sleep
GetSystemDirectoryA
lstrcmpA
CreateThread
lstrcpynA
CloseHandle
CreateFileA
GetExitCodeThread
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
LoadLibraryA
ReadFile
VirtualProtectEx
GetPrivateProfileStringA
lstrlenA
ExitProcess
GetPrivateProfileIntA
lstrcpyA
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
KillTimer
SetTimer
wsprintfA
ServiceRouteEx
StartServiceEx
StopServiceEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ