ExSome
InstallLaunchEv
InstallServerEx
RunDll
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
367ff8f6da09e47ff514114fc3a7ae60_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
367ff8f6da09e47ff514114fc3a7ae60_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
367ff8f6da09e47ff514114fc3a7ae60_JaffaCakes118
Size
49KB
MD5
367ff8f6da09e47ff514114fc3a7ae60
SHA1
fee6c00f5f74f5e6d03a80efda6be786bfd3ac4e
SHA256
cbfa7b2c2ed5b6e3fc143ea8f4f00843117c89bf4fa0aa22c5123b1c4f942939
SHA512
25b937b427d71b336f0954e37e5fcfe18f9990e2ebf16243911e7f1b8e8c88941aabeebd6c48901dc73e9b11079531a73b51514b4359a524c1d1d95cecfba408
SSDEEP
768:IpIb5Mnz3KswLQDARm/Mcur8DHQG4YGauiHSNrRgbOu:IpIbyzaUZMcur8D5ga5Sh2bOu
Checks for missing Authenticode signature.
resource |
---|
367ff8f6da09e47ff514114fc3a7ae60_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord2124
ord5277
ord2446
ord5261
ord2982
ord3259
ord4465
ord3136
ord3147
ord2985
ord3262
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord3081
ord567
ord818
ord3742
ord2915
ord924
ord665
ord2818
ord1979
ord5442
ord3318
ord5186
ord354
ord922
ord926
ord4275
ord2763
ord941
ord2077
ord2029
ord5065
ord1727
ord3346
ord5300
ord5303
ord4079
ord4699
ord5307
ord5289
ord5715
ord4622
ord565
ord817
ord1247
ord2726
ord4226
ord825
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord5302
ord4698
ord5714
ord3738
ord815
ord561
ord2152
ord1233
ord2725
ord860
ord1168
ord6467
ord540
ord2919
ord5572
ord5683
ord5710
ord858
ord4202
ord823
ord537
ord4204
ord2764
ord800
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord6055
ord791
ord523
ord3717
ord967
ord1995
ord5479
ord5797
ord4919
ord4975
ord4863
ord4335
ord4447
ord4411
ord2032
ord5482
ord5811
ord4779
ord5308
ord2614
ord6877
ord4129
ord535
ord1948
ord2396
ord4274
ord826
ord1116
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord269
ord600
malloc
_adjust_fdiv
_initterm
free
_onexit
_EH_prolog
__dllonexit
strncat
strncpy
wcstombs
_mbscmp
__CxxFrameHandler
??1type_info@@UAE@XZ
strchr
_stricmp
ExitProcess
GetLastError
FreeConsole
CreateProcessA
LocalFree
LocalAlloc
CreateThread
DeleteFileA
GetFileSize
ReadFile
GetCurrentThreadId
GetTempPathA
CreateFileA
WriteFile
GetModuleFileNameA
LoadLibraryA
FreeLibrary
SetLastError
GetCurrentProcessId
IsBadReadPtr
GetCurrentProcess
DuplicateHandle
Sleep
OpenProcess
SuspendThread
GetThreadContext
SetThreadContext
ResumeThread
GetVersionExA
VirtualAllocEx
WriteProcessMemory
CreateFileMappingA
MapViewOfFile
GetModuleHandleA
GetProcAddress
Thread32First
Thread32Next
CreateToolhelp32Snapshot
Process32First
Process32Next
SetFilePointer
CloseHandle
SetWindowsHookExA
CallNextHookEx
FindWindowA
EnableWindow
CreateWindowExA
wsprintfA
PtInRect
CallWindowProcA
GetWindowTextA
GetWindowLongA
SetWindowLongA
PostMessageA
RegOpenKeyExA
RegisterServiceCtrlHandlerA
SetServiceStatus
CloseServiceHandle
RegSetValueExA
RegCloseKey
RegCreateKeyA
CreateServiceA
OpenSCManagerA
RegQueryValueExA
OpenServiceA
StartServiceA
ExSome
InstallLaunchEv
InstallServerEx
RunDll
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ