Delete
First
InjectService
Second
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
2d58d90e5d2bf22f7f7689751ad60d35_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2d58d90e5d2bf22f7f7689751ad60d35_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2d58d90e5d2bf22f7f7689751ad60d35_JaffaCakes118
Size
15KB
MD5
2d58d90e5d2bf22f7f7689751ad60d35
SHA1
75f004cc29d0615d2e54f4988ea910e41ffa9e22
SHA256
2eb6c97eb181f2e781e7eb69491fb97aa6c4bd8b375ef4d4f8321f9ed1b7cf15
SHA512
e1c1f6053a1e2ccf0db9d05bd48e8243c264850b60d629bdb967c044611114e31652754add5b4b902371f01567a94bb890fe13ee356e66ae3afc18002e635378
SSDEEP
384:yqcMWIi2SXRmTUefv0hQEch8GR9HMu1fzM:yquhXqr0Lch8isuBzM
Checks for missing Authenticode signature.
resource |
---|
2d58d90e5d2bf22f7f7689751ad60d35_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
FreeLibrary
GetModuleHandleW
GetCurrentProcess
VirtualFreeEx
LoadLibraryW
VirtualAllocEx
OpenProcess
WriteProcessMemory
CreateRemoteThread
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentDirectoryW
GetTimeFormatW
GetDateFormatW
MultiByteToWideChar
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetLastError
lstrcatW
lstrlenW
Sleep
DeleteFileW
GetModuleFileNameW
CloseHandle
WaitForSingleObject
CreateThread
FreeConsole
lstrcpyW
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
wsprintfW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetServiceStatus
ChangeServiceConfigW
OpenServiceW
CloseServiceHandle
RegCreateKeyW
ChangeServiceConfig2W
CreateServiceW
OpenSCManagerW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegisterServiceCtrlHandlerW
GetUrlCacheEntryInfoW
PathFileExistsW
GetAdaptersInfo
Delete
First
InjectService
Second
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ