ServiceRouteExA
StartServiceEx
StopServiceEx
Static task
static1
Behavioral task
behavioral1
Sample
2ff1f3df16f0f73758a2bd2991ce1aed_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ff1f3df16f0f73758a2bd2991ce1aed_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ff1f3df16f0f73758a2bd2991ce1aed_JaffaCakes118
Size
14KB
MD5
2ff1f3df16f0f73758a2bd2991ce1aed
SHA1
677ccaf4120d9a5173ea0e77761b47d6e4557ef3
SHA256
eb8e4f726b387e86dd9438ab87f6b90af68665cd5cfa392aba6c9eaad3bf139e
SHA512
bb9e15ef5cc5734ce788e805bddd159c6b572f475c201f83cab8e4f248e0f0abaa565dd133a8a7dd6d4b1374b9c236cff324fae1118a56be0d593a936ebf5640
SSDEEP
192:qyL1cGWnWaQMCvqaWwHnJIa4JuBBQ6PRQkzHc3l9Kux:t1enzQ9qyCaUuBBQARQkzc3Oux
Checks for missing Authenticode signature.
resource |
---|
2ff1f3df16f0f73758a2bd2991ce1aed_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
strlen
memcpy
memcmp
RtlZeroMemory
closesocket
gethostname
LoadLibraryA
EnterCriticalSection
DeleteCriticalSection
CreateThread
lstrlenA
lstrcpyA
lstrcmpiA
lstrcmpA
WaitForSingleObject
TerminateThread
Sleep
LeaveCriticalSection
CloseHandle
CreateFileA
GetExitCodeThread
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
lstrcatA
ReadFile
VirtualProtectEx
InitializeCriticalSection
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
wsprintfA
ServiceRouteExA
StartServiceEx
StopServiceEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ