ServiceMain
_UpdateProc@16
Static task
static1
Behavioral task
behavioral1
Sample
27853428c088b8ab8568068030a94e60_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
27853428c088b8ab8568068030a94e60_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
27853428c088b8ab8568068030a94e60_JaffaCakes118
Size
84KB
MD5
27853428c088b8ab8568068030a94e60
SHA1
648798b0f73a5b098de2404981471b75ca5703ed
SHA256
8bc0f1e314d5d8ac7c84c0ee34b042580f95a078df9cb37ffb3778668fe1bcd8
SHA512
d79b2c8e2ca73cf8e1fef4ef456e3a745e14f7a68772ef2e22df151519c81cece40969fe2d5d3015d753475209d568b2d4a660bfe547559b6e1c1087e99d6aae
SSDEEP
768:9YIyXRaRm1BHjMML4QtPYS3DVovC4GKTLq6ePQYIw92enGJkVToQgP+:+IkQENF4GKTLqbQYpZGJEoj+
Checks for missing Authenticode signature.
resource |
---|
27853428c088b8ab8568068030a94e60_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MoveFileExA
CopyFileA
GetSystemDirectoryA
DeleteFileA
Sleep
OutputDebugStringA
GetFileAttributesA
GetPrivateProfileIntA
GetPrivateProfileStringA
lstrlenA
GetWindowsDirectoryA
lstrcatA
CreateFileA
WriteFile
CloseHandle
WritePrivateProfileStringA
CreateProcessA
GetModuleFileNameA
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetProcAddress
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetLastError
RtlUnwind
HeapFree
HeapAlloc
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
GetCommandLineA
GetVersion
GetCPInfo
GetACP
GetOEMCP
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
CreateDirectoryA
wsprintfA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyA
SetServiceStatus
RegisterServiceCtrlHandlerA
OpenSCManagerA
OpenServiceA
QueryServiceStatus
ControlService
RegOpenKeyA
RegQueryValueExA
RegCloseKey
StartServiceA
CloseServiceHandle
RegDeleteKeyA
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
inet_addr
send
recv
htons
socket
gethostbyname
connect
inet_ntoa
WSACleanup
WSAStartup
closesocket
Netbios
ServiceMain
_UpdateProc@16
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ