ServiceMain
SrvEntry
Static task
static1
Behavioral task
behavioral1
Sample
32fcee05ea4beadde4274080d1b7ece0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
32fcee05ea4beadde4274080d1b7ece0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
32fcee05ea4beadde4274080d1b7ece0_JaffaCakes118
Size
66KB
MD5
32fcee05ea4beadde4274080d1b7ece0
SHA1
785dcdc7a85588901cf56a8cc11b166c033e4d61
SHA256
c0a773dc89c04dc366ce69e843f10b902d2b7d69cafa7f540126a3b8cecedc51
SHA512
479787256e7e923f732cccce3c6ce207f198d608c430e6435698d1899a6dc041ce56530112dd90c35fa4d53634889cc83be0eac23e91f19b5b2be9dc1d8026f4
SSDEEP
1536:sUfvjNOXviNtYeXcOJ69vceMqaNODqyFOTHV4mwkSsWOqqPyj9uB:1vAXvwtYYJ69vceMaG4bm9SVHuc9uB
Checks for missing Authenticode signature.
resource |
---|
32fcee05ea4beadde4274080d1b7ece0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetEvent
InitializeCriticalSection
DeleteCriticalSection
TerminateProcess
GetExitCodeProcess
PeekNamedPipe
CreateProcessA
CreatePipe
FreeLibraryAndExitThread
MoveFileExA
OpenProcess
WinExec
LeaveCriticalSection
FreeConsole
GetCurrentProcess
HeapFree
HeapAlloc
GetProcessHeap
ProcessIdToSessionId
GetCurrentProcessId
SizeofResource
LockResource
LoadResource
SetLastError
FindResourceA
CreateEventA
CreateThread
WaitForSingleObject
TerminateThread
GetModuleFileNameA
GetLastError
CopyFileA
GetTickCount
SetFilePointer
SetEndOfFile
WriteFile
FlushFileBuffers
GetFileTime
SetFileTime
CreateToolhelp32Snapshot
Process32First
Process32Next
GetSystemDirectoryA
DeleteFileA
Sleep
CreateFileA
GetFileSize
CloseHandle
ReadFile
EnterCriticalSection
RegDeleteValueA
BuildExplicitAccessWithNameA
GetKernelObjectSecurity
GetSecurityDescriptorDacl
SetEntriesInAclA
MakeAbsoluteSD
SetKernelObjectSecurity
ImpersonateLoggedOnUser
DuplicateTokenEx
SetTokenInformation
CreateProcessAsUserA
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
GetTokenInformation
LookupAccountSidA
RegEnumValueA
RegDeleteKeyA
RegisterServiceCtrlHandlerA
SetServiceStatus
SetSecurityDescriptorDacl
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryInfoKeyA
RegEnumKeyExA
sprintf
rand
srand
strncmp
strstr
atoi
strchr
free
malloc
system
_snprintf
wcstombs
strncpy
__CxxFrameHandler
??3@YAXPAX@Z
_except_handler3
__dllonexit
_onexit
_initterm
_adjust_fdiv
_stricmp
_strnicmp
inet_ntoa
recv
send
htonl
WSAGetLastError
htons
setsockopt
socket
ioctlsocket
select
closesocket
connect
shutdown
WSACleanup
WSAStartup
gethostbyname
inet_addr
ServiceMain
SrvEntry
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ