CoGetComCatalog
GetRPCSSInfo
ServiceMain
WhichService
_abcdef@16
abcdef
Static task
static1
Behavioral task
behavioral1
Sample
25ad2d7eba90d5d64ed7e305eb2e910f_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
25ad2d7eba90d5d64ed7e305eb2e910f_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
25ad2d7eba90d5d64ed7e305eb2e910f_JaffaCakes118
Size
34KB
MD5
25ad2d7eba90d5d64ed7e305eb2e910f
SHA1
a5a0944e6c138c94688b76398368e1dfa27b0be2
SHA256
41399a0037c1d05f2176c1f6d781e4bdd009a42dc69e089a0afab2d0cccca934
SHA512
215794a64c96b7ed59cf794dbe6d318b92be989f4ef2593bb74393c724389ac1c32716301845621a05f276b12e717a4d6bf2c66cb55bfc0695c83fa4c3c62940
SSDEEP
384:JVpoKxvOHwfctUiFF4cBWPAoV4B+68v8N0zAkO752:PFcQf2UiFeOIew6O8Kkkw5
Checks for missing Authenticode signature.
resource |
---|
25ad2d7eba90d5d64ed7e305eb2e910f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WriteFile
LoadResource
SizeofResource
GetModuleHandleA
lstrlenA
GetSystemDirectoryA
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
OpenProcess
GetCurrentProcessId
VirtualFreeEx
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
FindClose
FindNextFileA
lstrcpynA
lstrcpyA
lstrcmpA
FindFirstFileA
MultiByteToWideChar
SetFileTime
GetFileTime
WaitForSingleObject
CreateMutexA
CreateThread
ReleaseMutex
FreeLibrary
CreateEventA
GetLastError
SetEvent
CloseHandle
Sleep
CopyFileA
DeleteFileA
MoveFileExA
LoadLibraryA
GetProcAddress
GetModuleFileNameA
wsprintfA
LookupPrivilegeValueA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegOpenKeyA
RegSetValueExA
RegOpenKeyExA
AdjustTokenPrivileges
OpenProcessToken
StrStrIA
PathFileExistsA
strcat
strcpy
strstr
strncat
strlen
memset
CoGetComCatalog
GetRPCSSInfo
ServiceMain
WhichService
_abcdef@16
abcdef
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ