Do98Work
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
1c7352b1fba66f66a3e594d4f9ef21cc_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1c7352b1fba66f66a3e594d4f9ef21cc_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
1c7352b1fba66f66a3e594d4f9ef21cc_JaffaCakes118
Size
38KB
MD5
1c7352b1fba66f66a3e594d4f9ef21cc
SHA1
afc5ddc85977c0521a0f9ce45ac756026baf1363
SHA256
0f5ce10f630179400e4404959152a548bc9fc94454df1bd3197104d8adbf2a96
SHA512
e208ea2a718c560d16488686d1671ea8b68fbfec14ab56e5ee73dba935b3231e3525b9ef34b2eebdbad1d4437e91e4f694fa006d560b905dac44a6575aa02f17
SSDEEP
384:Ffm4QiUmbUozSJUdFZuaUcB4g1Uv75qjU0KURgW7eU8MhURxU7ZjORInvZ9LQ9UW:D+5rlchQwwxSeiCXE1/WC/HGkvFH8
Checks for missing Authenticode signature.
resource |
---|
1c7352b1fba66f66a3e594d4f9ef21cc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteFileA
Sleep
CloseHandle
CreateFileA
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
DisableThreadLibraryCalls
FreeLibrary
FreeLibraryAndExitThread
ExitProcess
GetSystemDirectoryA
GetStartupInfoA
WaitForSingleObject
VirtualFreeEx
CreateRemoteThread
GetModuleHandleA
WriteProcessMemory
VirtualAllocEx
lstrlenW
OpenProcess
MultiByteToWideChar
DeviceIoControl
GetCurrentProcessId
lstrcmpA
lstrcpyA
GetVersion
lstrcatA
GetProcAddress
lstrlenA
LoadLibraryA
CreateThread
CharUpperA
wsprintfA
CreateServiceA
OpenServiceA
StartServiceA
CloseServiceHandle
RegOpenKeyExA
RegCloseKey
DeleteService
OpenSCManagerA
ControlService
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenA
InternetOpenUrlA
InternetSetOptionA
inet_addr
WSAStartup
inet_ntoa
gethostbyname
SHDeleteKeyA
atoi
_adjust_fdiv
malloc
_initterm
free
_except_handler3
fseek
fread
strstr
fopen
fwrite
fclose
memset
strcpy
??2@YAPAXI@Z
__CxxFrameHandler
_EH_prolog
sprintf
strrchr
strchr
memcpy
??3@YAXPAX@Z
Do98Work
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ