CoGetComCatalog
GetRPCSSInfo
Ins
ServiceMain
WhichService
_Ins@16
Static task
static1
Behavioral task
behavioral1
Sample
2539fbe37d0df15ca526c2aa093012d9_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2539fbe37d0df15ca526c2aa093012d9_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
2539fbe37d0df15ca526c2aa093012d9_JaffaCakes118
Size
60KB
MD5
2539fbe37d0df15ca526c2aa093012d9
SHA1
a9ef38eee509baa74d730cba2462bf8ca16c4190
SHA256
dd7ce5be7b5cf7ab16a428b22b1348891f51e9fe754881138b32aeab994e3ac3
SHA512
983ceda742d917a804d543be75ea4678272b247c5bec9e0df1d9452a77864e738b34aa0943bc524095abbd185caf0198640afc52477e3f9633a2d5cfc8fa39eb
SSDEEP
768:0N3S3OZwzUDNzn6S97asBVVDhz5IttZW8yXwBGdZKf:01aOZnx6S97asBVphQt48yZvK
Checks for missing Authenticode signature.
resource |
---|
2539fbe37d0df15ca526c2aa093012d9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FindResourceA
MultiByteToWideChar
lstrlenA
GetProcAddress
LoadLibraryA
ReleaseMutex
GetLastError
VirtualFreeEx
WaitForSingleObject
WriteProcessMemory
VirtualAllocEx
OpenProcess
Process32Next
lstrcmpiA
FindClose
FindNextFileA
lstrcpyA
FindFirstFileA
SizeofResource
GetWindowsDirectoryA
GetSystemDirectoryA
GetCurrentProcessId
GetModuleHandleA
LoadResource
CreateFileA
WriteFile
DeleteFileA
MoveFileExA
CopyFileA
GetModuleFileNameA
CreateMutexA
CloseHandle
lstrcatA
Sleep
wsprintfA
RegSetValueExA
RegOpenKeyA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
StrStrIA
PathFileExistsA
strstr
strncat
memset
??2@YAPAXI@Z
memcpy
_beginthreadex
??3@YAXPAX@Z
CoGetComCatalog
GetRPCSSInfo
Ins
ServiceMain
WhichService
_Ins@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ