InstallA
InstallService
RemoveA
ServiceMain
UninstallService
Static task
static1
Behavioral task
behavioral1
Sample
2ed2cf6258a9621d42feffcea5be5307_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ed2cf6258a9621d42feffcea5be5307_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ed2cf6258a9621d42feffcea5be5307_JaffaCakes118
Size
9KB
MD5
2ed2cf6258a9621d42feffcea5be5307
SHA1
778f164c3f4b62831e5bc2138fc7ee9cb971a9a1
SHA256
114483bd5fa8cfa2e1d21bc2e86419f08672c0730ad086ce35a03f74e07a41c9
SHA512
310b1895bfae0f6b3b008a718e105bcfa2fbe66c92a909d145bd00e10ba0bac8439728270fd4d4f1c782d8d5b31e67df9b9aee72ec8c4cae7143190c8549bcdf
SSDEEP
192:bf2Mvmox4ztEmPafv999Tu+n5GRx+Hb9J:z2vox4pNST1GTu
Checks for missing Authenticode signature.
resource |
---|
2ed2cf6258a9621d42feffcea5be5307_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateProcessA
CreatePipe
PeekNamedPipe
GetLocalTime
ReadFile
WriteFile
CloseHandle
FreeConsole
GetComputerNameA
Sleep
RegSetValueExA
RegCloseKey
SetServiceStatus
RegisterServiceCtrlHandlerA
RegOpenKeyExA
??2@YAPAXI@Z
atol
??3@YAXPAX@Z
fread
strcmp
sprintf
strrchr
ftell
fseek
fclose
strlen
fopen
fwrite
atoi
strstr
memcpy
wcstombs
strncpy
strcpy
sscanf
memset
strcat
free
_initterm
malloc
_adjust_fdiv
_strnicmp
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
HttpEndRequestA
InternetWriteFile
HttpSendRequestExA
HttpSendRequestA
InternetSetOptionA
InternetQueryOptionA
HttpOpenRequestA
InternetConnectA
InternetCloseHandle
InstallA
InstallService
RemoveA
ServiceMain
UninstallService
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ