ServiceRouteEx
StartServiceEx
StopServiceEx
Static task
static1
Behavioral task
behavioral1
Sample
2becb7827d2c066bb84bc7095b60118d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2becb7827d2c066bb84bc7095b60118d_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2becb7827d2c066bb84bc7095b60118d_JaffaCakes118
Size
19KB
MD5
2becb7827d2c066bb84bc7095b60118d
SHA1
929f679ec41722edb64a460455e3ff3108e29ed1
SHA256
985ed7a3c7b58a1402b44d7b2c1df2a8a727b58e6bc73ad66b19c50285d792fc
SHA512
dddf8d1076df7ded779c7b7a2ab4d232ecf9265fb80da5797e743873dc8567d1595f9654405fea79bcb58083952358bc82a8dd301429447efb10d84a23a290c0
SSDEEP
384:mTfhTJgJtCef7uu3EF6GduBBQARQkYUmQ:mLNwX+F6GQBBQARQkYH
Checks for missing Authenticode signature.
resource |
---|
2becb7827d2c066bb84bc7095b60118d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
strlen
RtlZeroMemory
strcpy
memcmp
memcpy
VirtualFree
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
lstrcatA
WriteProcessMemory
VirtualQueryEx
CloseHandle
CreateFileA
CreateThread
GetCurrentProcess
GetCurrentProcessId
GetExitCodeThread
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
LoadLibraryA
ReadFile
ReadProcessMemory
Sleep
TerminateProcess
VirtualAlloc
VirtualProtectEx
KillTimer
SetTimer
SetWindowLongA
SetWindowsHookExA
UnhookWindowsHookEx
MessageBoxA
GetWindowTextA
GetWindowThreadProcessId
GetWindowLongA
wsprintfA
CallNextHookEx
CallWindowProcA
EnumWindows
send
gethostname
ServiceRouteEx
StartServiceEx
StopServiceEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ