Install
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
305911e8b0fddd036b2bd724e2769702_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
305911e8b0fddd036b2bd724e2769702_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
305911e8b0fddd036b2bd724e2769702_JaffaCakes118
Size
32KB
MD5
305911e8b0fddd036b2bd724e2769702
SHA1
ca4df8df5ae4345ce6113a92fd9dd3d52fd53afd
SHA256
3df54b4abadd7dc6367fb36514b0dc18a6d6bbdb91c0eeca0bfeb6e30e5e8913
SHA512
576294caef08acad3885222c3d1d7b376f28acd8de3691f4bd5cea3420a90fe2962d963be80e639b3de3d79704d21129154a84be49b04555e7998fd1b2fef119
SSDEEP
384:u4nE9x5UIUe5XwR05pW/tZy22xDiihYreq3LwgicbXIIG4zbnn:u4nMx5UIR5w05py7re6Lb
Checks for missing Authenticode signature.
resource |
---|
305911e8b0fddd036b2bd724e2769702_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetDriveTypeA
FindFirstFileA
WinExec
CopyFileA
WriteFile
FindNextFileA
GetLogicalDrives
MoveFileA
FileTimeToSystemTime
GetSystemTime
GetFileTime
CreateFileA
CreateMutexA
TerminateProcess
RemoveDirectoryA
DeleteFileA
FindClose
CreatePipe
SetFileTime
SetFilePointer
GetFileSize
lstrlenA
GetWindowsDirectoryA
GetVersionExA
GetLocaleInfoA
GetACP
CreateDirectoryA
CloseHandle
TerminateThread
Sleep
PeekNamedPipe
SetEvent
WaitForSingleObject
GetSystemDirectoryA
GetComputerNameA
CreateThread
SetProcessShutdownParameters
CreateEventA
ReadFile
CreateProcessA
PostThreadMessageA
GetMessageA
DispatchMessageA
TranslateMessage
ntohs
ntohl
inet_ntoa
gethostbyname
gethostname
WSAStartup
htons
htonl
RegCreateKeyA
RegOpenKeyExA
RegCloseKey
CreateServiceA
OpenSCManagerA
CloseServiceHandle
RegSetValueExA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegQueryValueExA
InternetOpenUrlA
HttpOpenRequestA
HttpSendRequestA
HttpEndRequestA
InternetCloseHandle
InternetOpenA
InternetConnectA
InternetReadFile
_mbsstr
_adjust_fdiv
malloc
_initterm
free
_mbsnbcpy
strcpy
_mbsicmp
strlen
_itoa
_mbscmp
_except_handler3
_mbsnbicmp
strcat
_mbsnbcat
memset
sprintf
Install
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ