ServiceMain
SvchostPushServiceGlobals
Behavioral task
behavioral1
Sample
3ded50e57299e508ef288c6f8c0c6148_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3ded50e57299e508ef288c6f8c0c6148_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3ded50e57299e508ef288c6f8c0c6148_JaffaCakes118
Size
59KB
MD5
3ded50e57299e508ef288c6f8c0c6148
SHA1
d2cafd6d50c4509d6e2229f01107d12ea2fb4ac8
SHA256
2262db152d31b8739284948ad89d0efab7b9351600d62e923b6c9690dc02e9c2
SHA512
b860ecec149d87946e15d92b101eac667c4c36926fda08416ed87f96e1892f562184591727a4725c8b7868893cb63c75b185c1612d878bd18fcdc8cb2302aeb8
SSDEEP
768:o7nsJxU3QyT7tS77eogGc89YhSavPGfs90fIMV5NjNHuSCdxPoL:oTExU3Tk773cKaGfs90fIM9jNHnC4L
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
3ded50e57299e508ef288c6f8c0c6148_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLocalTime
HeapFree
GetProcessHeap
MapViewOfFile
CreateFileMappingA
HeapAlloc
UnmapViewOfFile
GlobalFree
GlobalAlloc
GetTickCount
FindResourceA
DeviceIoControl
LoadLibraryExA
SetFileAttributesA
ReleaseMutex
OpenEventA
SetErrorMode
CreateMutexA
SetUnhandledExceptionFilter
FreeConsole
GetCurrentThreadId
GetSystemDirectoryA
LoadResource
SetLastError
GetModuleFileNameA
WriteFile
SetFilePointer
ReadFile
CreateFileA
GetFileSize
GetFileAttributesA
GetLastError
DeleteFileA
GetVersionExA
GetModuleHandleA
GetProcAddress
FreeLibrary
lstrcatA
lstrlenA
Sleep
CancelIo
InterlockedExchange
lstrcpyA
ResetEvent
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
CreateEventA
VirtualFree
DeleteCriticalSection
InitializeCriticalSection
SetEvent
WaitForSingleObject
TerminateThread
CloseHandle
SizeofResource
SetProcessWindowStation
GetProcessWindowStation
UnhookWindowsHookEx
GetKeyNameTextA
CallNextHookEx
SetWindowsHookExA
wsprintfA
GetWindowTextA
GetActiveWindow
OpenDesktopA
GetThreadDesktop
GetUserObjectInformationA
OpenInputDesktop
SetThreadDesktop
CloseDesktop
SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceA
RegCreateKeyExA
RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
CloseServiceHandle
ControlService
OpenServiceA
OpenSCManagerA
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
RegOpenKeyA
FreeSid
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
InitializeSecurityDescriptor
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
_strnicmp
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
calloc
_beginthreadex
wcstombs
realloc
strncat
strncpy
_except_handler3
free
malloc
strchr
_CxxThrowException
_ftol
ceil
memmove
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
WSAStartup
WSACleanup
WSAIoctl
setsockopt
connect
htons
gethostbyname
socket
ntohs
recv
closesocket
select
send
gethostname
getsockname
ImmReleaseContext
ImmGetContext
ImmGetCompositionStringA
capGetDriverDescriptionA
ServiceMain
SvchostPushServiceGlobals
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ