DebugEnter
Delete
First
InjectService
Second
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
3ada06c88eabf3c2581f482400d924bc_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ada06c88eabf3c2581f482400d924bc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3ada06c88eabf3c2581f482400d924bc_JaffaCakes118
Size
16KB
MD5
3ada06c88eabf3c2581f482400d924bc
SHA1
099880d153411cdc3c6932f1b21ddc5243549f85
SHA256
4ef0e25c8cc99a804ab54c9d37f1013a656702d41cac30e9b3bb91077d8464cd
SHA512
da0f26f487c1db5f2de918a17aa911e0e9a2c957619d709219f376b46c9d22f282a1e530ab1450ef33804db16e1dd5378b305b50f2fd8ca66a86784886a49504
SSDEEP
384:/oWIi30OL8iWXQ0+QYtXc8cUSRpyu1hzSP9:/r3DAiTx3cUKyuDzs9
Checks for missing Authenticode signature.
resource |
---|
3ada06c88eabf3c2581f482400d924bc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryW
GetProcAddress
FreeLibrary
GetModuleHandleW
GetCurrentProcess
VirtualFreeEx
GetCurrentDirectoryW
VirtualAllocEx
OpenProcess
WriteProcessMemory
CreateRemoteThread
IsDebuggerPresent
SetUnhandledExceptionFilter
GetTimeFormatW
GetDateFormatW
OutputDebugStringW
MultiByteToWideChar
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetLastError
lstrcatW
lstrlenW
Sleep
DeleteFileW
GetModuleFileNameW
CloseHandle
WaitForSingleObject
CreateThread
FreeConsole
lstrcpyW
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
wsprintfW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetServiceStatus
ChangeServiceConfigW
OpenServiceW
CloseServiceHandle
RegCreateKeyW
ChangeServiceConfig2W
CreateServiceW
OpenSCManagerW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegisterServiceCtrlHandlerW
GetUrlCacheEntryInfoW
PathFileExistsW
GetAdaptersInfo
DebugEnter
Delete
First
InjectService
Second
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ