CoGetComCatalog
GetRPCSSInfo
INS
ServiceMain
WhichService
Static task
static1
Behavioral task
behavioral1
Sample
27d23ca73a1ef06eee8eb74e81609c32_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
27d23ca73a1ef06eee8eb74e81609c32_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
27d23ca73a1ef06eee8eb74e81609c32_JaffaCakes118
Size
39KB
MD5
27d23ca73a1ef06eee8eb74e81609c32
SHA1
ea9e35966ac64a7afc4e5e06959ba06e5b086a58
SHA256
5dc06934b0fb26f0df7ce2c21ae9b5493782f08a70bb5c6f9e260711885b332b
SHA512
1c3833579cd9f526b7380aa8de8f8309b0fbad29f9d3e7bc77f4537f2da9a4adca17a49f439bbefc2af92f7c71d1ed09c49837d481fb1edc060602a92f53a8e8
SSDEEP
384:F0bpnWpmw5mZZ0yfcrUipJHHudF09aINCJyaiLikqTxO27N6E:FGRWs3ZZFf0UiZNJSkqdh6E
Checks for missing Authenticode signature.
resource |
---|
27d23ca73a1ef06eee8eb74e81609c32_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WriteFile
CreateFileA
LoadResource
SizeofResource
FindResourceA
lstrlenA
GetSystemDirectoryA
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
OpenProcess
GetCurrentProcessId
VirtualFreeEx
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
FindClose
FindNextFileA
lstrcpynA
lstrcpyA
FindFirstFileA
MultiByteToWideChar
SetFileTime
GetFileTime
WaitForSingleObject
CreateMutexA
CreateThread
ReleaseMutex
FreeLibrary
CreateEventA
GetLastError
SetEvent
CloseHandle
Sleep
CopyFileA
DeleteFileA
MoveFileExA
LoadLibraryA
GetProcAddress
lstrcmpA
GetModuleFileNameA
wsprintfA
LookupPrivilegeValueA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegOpenKeyA
RegSetValueExA
RegOpenKeyExA
AdjustTokenPrivileges
OpenProcessToken
StrStrIA
PathFileExistsA
strcpy
memset
strstr
strncat
strcat
strlen
CoGetComCatalog
GetRPCSSInfo
INS
ServiceMain
WhichService
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ