ServiceMain
Start
Static task
static1
Behavioral task
behavioral1
Sample
3e4fbb9190227848af32dacb17e9fd17_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e4fbb9190227848af32dacb17e9fd17_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3e4fbb9190227848af32dacb17e9fd17_JaffaCakes118
Size
148KB
MD5
3e4fbb9190227848af32dacb17e9fd17
SHA1
4a152785c8b092166cfb164688fc767c22dd3932
SHA256
9c4053485b37ebc972c95abd98ea4ee386feb745cc012b9e57dc689469ea064f
SHA512
be560f7e833e3f49a8dddc1ce02c2f82d3cda816cd6972f897defce69a3dfc9b7a5130bb728fb70cb534f72cb90f7b2cfb7490910b5e23d06f2a89e6e653b9ce
SSDEEP
3072:UcxQTikzeclHW9pTmBerdqRYRg1Ih61TsnFbYklk11Gd:Uc6TTzXl27T2eJqRYR4IUI9Yko1G
Checks for missing Authenticode signature.
resource |
---|
3e4fbb9190227848af32dacb17e9fd17_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CreateEventW
GetModuleFileNameA
LoadLibraryA
DisableThreadLibraryCalls
GetProcAddress
SetLastError
CreateThread
SetEvent
WaitForSingleObject
SetErrorMode
CloseHandle
GetVersionExA
ReleaseMutex
CreateMutexA
CreateEventA
OpenMutexA
GetLastError
GetCurrentProcess
GetModuleHandleW
VirtualFree
IsBadReadPtr
WriteFile
GetModuleFileNameW
VirtualAlloc
GetModuleHandleA
GetCurrentProcessId
SetCurrentDirectoryA
FreeLibrary
VirtualProtect
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
CreateMutexW
WideCharToMultiByte
MultiByteToWideChar
GetCurrentThreadId
FlsSetValue
GetCommandLineA
HeapReAlloc
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EncodePointer
FlsGetValue
FlsFree
FlsAlloc
DecodePointer
RaiseException
RtlPcToFileHeader
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
RtlUnwindEx
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
HeapSize
SetFilePointer
GetConsoleCP
GetConsoleMode
GetStringTypeW
LoadLibraryW
SetStdHandle
FlushFileBuffers
WriteConsoleW
CreateFileW
Sleep
GetTickCount
GetLocaleInfoA
GetComputerNameA
GetProcessHeap
HeapFree
HeapAlloc
ExitProcess
wsprintfA
StartServiceA
RegCreateKeyA
CreateServiceA
RegQueryValueExA
RegisterServiceCtrlHandlerA
RegSetValueExA
OpenSCManagerW
CloseServiceHandle
OpenServiceA
GetUserNameA
OpenSCManagerA
RegOpenKeyA
RegCloseKey
RegCreateKeyExA
SetServiceStatus
WSAGetLastError
WSAStartup
gethostname
inet_ntoa
gethostbyname
inet_addr
PathAppendA
GetNetworkParams
DnsQuery_A
ServiceMain
Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ