StartServiceEx
StopServiceEx
_ServiceRouteEx@12
Static task
static1
Behavioral task
behavioral1
Sample
2d8b745e2a61588e0a79bb83201f6dbf_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2d8b745e2a61588e0a79bb83201f6dbf_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2d8b745e2a61588e0a79bb83201f6dbf_JaffaCakes118
Size
24KB
MD5
2d8b745e2a61588e0a79bb83201f6dbf
SHA1
11f77bbabe42acd47b85cb633669e888dd2cc6bc
SHA256
26bcba222058739e6a290edfba8519b7e8224810f34bfb3f557cd9ed5f76bdc3
SHA512
c8e6345f6a1cc6416be1610332d3d56e7130169ab041bd98318fdd38570f85b24216845d20bddbdbfb0c058e4eaeaf99cb500ce2f4ee124b02c8064cefde8e82
SSDEEP
192:0dSJolcY9UdzWMruIpjuBBQ6PRQkXMhMNn5WnN7i3khpIo:0dSJolazB7uBBQARQkchI5WRi3+p
Checks for missing Authenticode signature.
resource |
---|
2d8b745e2a61588e0a79bb83201f6dbf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentDirectoryA
lstrcatA
CloseHandle
ReadProcessMemory
GetModuleFileNameA
CreateThread
VirtualProtect
Sleep
lstrlenA
ExitProcess
CreateWindowExA
ShowWindow
KillTimer
UpdateWindow
DefWindowProcA
PostQuitMessage
DestroyWindow
DispatchMessageA
TranslateMessage
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
GetWindowTextA
wsprintfA
SetTimer
GetActiveWindow
RegisterClassA
GetMessageA
send
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
GetAdaptersInfo
memcmp
free
strcmp
strstr
memcpy
fopen
fclose
fwrite
strcat
memset
strcpy
strrchr
strlen
exit
_adjust_fdiv
malloc
_initterm
_strlwr
_strupr
_itoa
StartServiceEx
StopServiceEx
_ServiceRouteEx@12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ