ServiceRouteEx
StartServiceEx
StopServiceEx
Static task
static1
Behavioral task
behavioral1
Sample
2bbffd9fd2c6ddd69cf7d876e71999dc_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2bbffd9fd2c6ddd69cf7d876e71999dc_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2bbffd9fd2c6ddd69cf7d876e71999dc_JaffaCakes118
Size
24KB
MD5
2bbffd9fd2c6ddd69cf7d876e71999dc
SHA1
93551cc5bf410d51d6744b9b50c04e35d6c6e67c
SHA256
bde486307d1b6252efceb9bd3661c19b23c6e1c567fe52fbfa2c50483db4f6df
SHA512
a6c686437e82c37c12d08bbf49b308a666278942328d52117f222a51c3d87960f6eb0cc911637a886d6430632ac0a1d29aec35cd8fc692c85bae34be15e23e16
SSDEEP
384:wEiXFrSCQ0WFbF7ZuuBBQARQkgaqZh4a8WfMptsN0B+:fiXZ1B2F7ZZBBQARQkgx/zRfMpy0B+
Checks for missing Authenticode signature.
resource |
---|
2bbffd9fd2c6ddd69cf7d876e71999dc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
strlen
RtlZeroMemory
strcpy
memcmp
memcpy
VirtualFree
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
lstrcatA
WriteProcessMemory
VirtualQueryEx
CloseHandle
CreateFileA
CreateThread
GetCurrentProcess
GetCurrentProcessId
GetExitCodeThread
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
LoadLibraryA
ReadFile
ReadProcessMemory
Sleep
TerminateProcess
VirtualAlloc
VirtualProtectEx
KillTimer
SetTimer
SetWindowLongA
SetWindowsHookExA
UnhookWindowsHookEx
MessageBoxA
GetWindowTextA
GetWindowThreadProcessId
GetWindowLongA
wsprintfA
CallNextHookEx
CallWindowProcA
EnumWindows
send
gethostname
ServiceRouteEx
StartServiceEx
StopServiceEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ