InstallService
ServiceMain
UninstallService
installA
uninstallA
Static task
static1
Behavioral task
behavioral1
Sample
3d0c1dc5ac55f6d0e6b7fabfeb5158f5_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3d0c1dc5ac55f6d0e6b7fabfeb5158f5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3d0c1dc5ac55f6d0e6b7fabfeb5158f5_JaffaCakes118
Size
13KB
MD5
3d0c1dc5ac55f6d0e6b7fabfeb5158f5
SHA1
b6cf24c96925f04e01a64704852b00d40452ce7c
SHA256
ad5ce793bea64ed9a416236d1e4b99b021a771e5d57a46b97cf1e288e5617132
SHA512
1cf2db0378d83517d327fce54100530eab5f17a15de2c8b47abc1c38629cad46f5f3c829ab7ff4b33d5e00ead6ce179e3c7b490a024d0d868a40de3bb5d181f0
SSDEEP
384:jy57pYOL7kI8ggbm0A12gJ4dVQoQtSWD5Zy:2sOPHTgTA3ydVQcWD5Z
Checks for missing Authenticode signature.
resource |
---|
3d0c1dc5ac55f6d0e6b7fabfeb5158f5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreatePipe
GetCurrentDirectoryA
GetLastError
GetStartupInfoA
SetLastError
OutputDebugStringA
CreateProcessA
CloseHandle
ReadFile
GetWindowsDirectoryA
GetLongPathNameA
WinExec
CreateThread
GetSystemTime
WaitForSingleObject
TerminateThread
Sleep
lstrlenA
GetModuleFileNameA
OpenServiceA
DeleteService
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegCreateKeyA
RegSetValueExA
RegisterServiceCtrlHandlerA
SetServiceStatus
inet_addr
WSASocketA
closesocket
connect
ioctlsocket
send
select
__WSAFDIsSet
recv
shutdown
WSAStartup
gethostname
WSACleanup
htons
InternetCloseHandle
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
_chdir
_strnicmp
_adjust_fdiv
malloc
_initterm
free
??1type_info@@UAE@XZ
_except_handler3
_CxxThrowException
_stricmp
__CxxFrameHandler
strchr
_itoa
strstr
strncat
strlen
sscanf
atol
??2@YAPAXI@Z
strrchr
memset
wcstombs
strncpy
strcat
strcpy
atoi
??3@YAXPAX@Z
fclose
fflush
fwrite
fopen
InstallService
ServiceMain
UninstallService
installA
uninstallA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ