Install
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
1c585d14ffd5891b5eeaaa1a202b49fd_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1c585d14ffd5891b5eeaaa1a202b49fd_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1c585d14ffd5891b5eeaaa1a202b49fd_JaffaCakes118
Size
32KB
MD5
1c585d14ffd5891b5eeaaa1a202b49fd
SHA1
46d72503882a2a47b12ae892d6b97cc99baa3b60
SHA256
2040fb86cbeb7b9a42debc838e91dad069df7373196853d37c8e467a2d68ae3c
SHA512
4cd05484cd4638ff242ae9afa720f93993c8bc087facd1754aa4f88dc2d5afcc8b2b4299553663d12d819342bc697f80c987818467dca764d81a8f641206c532
SSDEEP
384:u4nE9x5UIUe5XwR05pW/tZy22xDivhYr6D3Lwgicby84vT+bnnC:u4nMx5UIR5w05pymr6DLd
Checks for missing Authenticode signature.
resource |
---|
1c585d14ffd5891b5eeaaa1a202b49fd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetDriveTypeA
FindFirstFileA
WinExec
CopyFileA
WriteFile
FindNextFileA
GetLogicalDrives
MoveFileA
FileTimeToSystemTime
GetSystemTime
GetFileTime
CreateFileA
CreateMutexA
TerminateProcess
RemoveDirectoryA
DeleteFileA
FindClose
CreatePipe
SetFileTime
SetFilePointer
GetFileSize
lstrlenA
GetWindowsDirectoryA
GetVersionExA
GetLocaleInfoA
GetACP
CreateDirectoryA
CloseHandle
TerminateThread
Sleep
PeekNamedPipe
SetEvent
WaitForSingleObject
GetSystemDirectoryA
GetComputerNameA
CreateThread
SetProcessShutdownParameters
CreateEventA
ReadFile
CreateProcessA
PostThreadMessageA
GetMessageA
DispatchMessageA
TranslateMessage
ntohs
ntohl
inet_ntoa
gethostbyname
gethostname
WSAStartup
htons
htonl
RegCreateKeyA
RegOpenKeyExA
RegCloseKey
CreateServiceA
OpenSCManagerA
CloseServiceHandle
RegSetValueExA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegQueryValueExA
InternetOpenUrlA
HttpOpenRequestA
HttpSendRequestA
HttpEndRequestA
InternetCloseHandle
InternetOpenA
InternetConnectA
InternetReadFile
_mbsstr
_adjust_fdiv
malloc
_initterm
free
_mbsnbcpy
strcpy
_mbsicmp
strlen
_itoa
_mbscmp
_except_handler3
_mbsnbicmp
strcat
_mbsnbcat
memset
sprintf
Install
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ