ServiceRouteEx
StartServiceEx
StopServiceEx
Static task
static1
Behavioral task
behavioral1
Sample
38fd1a6b2910ec242a975270e93d7ca0_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
38fd1a6b2910ec242a975270e93d7ca0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
38fd1a6b2910ec242a975270e93d7ca0_JaffaCakes118
Size
14KB
MD5
38fd1a6b2910ec242a975270e93d7ca0
SHA1
1a0b92185b7f350bb13abe01a8ab7ea779494eb3
SHA256
b2aa64b0b2a0929da71b1cb7b68b3286d40e87da41b2f480e48194e1554f1a17
SHA512
e60f1fa4e39fcd083d47902425b8410279f312f3ff1b74553918720e564767d3bae9d0aaede55aa6d56ec471093df4e7ff1c7fd96bb9fa63166c960ad4687523
SSDEEP
192:cVES80F1WmwzHwGBeZbJ6TzexEsc/uBBQ6PRQk0OdZS7X38hWtT:cBBimg+bJ6TzzsGuBBQARQkfd8j3CWt
Checks for missing Authenticode signature.
resource |
---|
38fd1a6b2910ec242a975270e93d7ca0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
strlen
memcpy
memcmp
RtlZeroMemory
closesocket
gethostname
VirtualProtectEx
TerminateThread
Sleep
IsBadReadPtr
GetSystemDirectoryA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpA
lstrcpynA
lstrcpyA
lstrcmpiA
WritePrivateProfileStringA
CloseHandle
CreateFileA
GetExitCodeThread
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
LoadLibraryA
ReadFile
CreateThread
lstrcatA
lstrlenA
WaitForSingleObject
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
KillTimer
SetTimer
wsprintfA
ServiceRouteEx
StartServiceEx
StopServiceEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ