CoGetComCatalog
GetRPCSSInfo
ServiceMain
WhichService
Static task
static1
Behavioral task
behavioral1
Sample
3e721623e29b8589c7f63d267f174d4e_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3e721623e29b8589c7f63d267f174d4e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3e721623e29b8589c7f63d267f174d4e_JaffaCakes118
Size
1.0MB
MD5
3e721623e29b8589c7f63d267f174d4e
SHA1
dc0c4ce1ed4f27880bcdaa04333f5df2fe56cb9e
SHA256
38a3b818c665cd07747c9b31d3430ae8524127f2dbf5ea10cc6763ef43164b3d
SHA512
05f96e2d608b849d76476f6d473d5a503a9b64af0053fb749391588b6d6c4e7317aab9813bf9fa7ea90c19f3bb754da20ae46719219a09b49a167fbb5fa2894c
SSDEEP
3072:71geSJl6mAkCjHnd94TB9Ghgz7XW37QxSS:RCJMbnziB9Ghgz7XU7QQ
Checks for missing Authenticode signature.
resource |
---|
3e721623e29b8589c7f63d267f174d4e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LocalAlloc
PeekNamedPipe
lstrcatA
InterlockedDecrement
WinExec
CreateMutexA
CreateFileW
SetFilePointer
SetEndOfFile
UnmapViewOfFile
FindClose
FindNextFileW
lstrcmpW
FindFirstFileW
GetFileSize
MapViewOfFile
CreateFileMappingA
GetDiskFreeSpaceExW
GetVolumeInformationW
lstrcpyW
lstrlenW
GetLogicalDriveStringsW
LocalReAlloc
CreateRemoteThread
GetProcAddress
GetModuleHandleA
GetSystemDirectoryA
CreateFileA
LoadLibraryA
ReadFile
OpenProcess
GetCurrentProcessId
VirtualFreeEx
VirtualAllocEx
lstrcmpiA
FreeLibrary
GetCurrentThread
WideCharToMultiByte
lstrcpyA
GetLastError
SetFileTime
GetFileTime
VirtualProtect
GetCurrentThreadId
InterlockedExchange
CreateEventA
ResumeThread
SetEvent
VirtualFree
VirtualAlloc
WritePrivateProfileStringA
GetPrivateProfileStringA
LocalFree
CreatePipe
GetStartupInfoA
CreateProcessA
WaitForSingleObject
TerminateProcess
DisconnectNamedPipe
WriteFile
lstrlenA
InterlockedIncrement
GetDriveTypeW
GetTempPathA
DeleteFileA
CloseHandle
AllocConsole
Sleep
GetTickCount
MoveFileExA
FreeConsole
GetCommandLineA
MultiByteToWideChar
CloseDesktop
BlockInput
keybd_event
MapVirtualKeyA
SetCapture
WindowFromPoint
SetCursorPos
mouse_event
GetCursorInfo
ReleaseDC
DestroyCursor
LoadCursorA
GetDesktopWindow
GetDC
CloseWindowStation
wsprintfA
wsprintfW
SwitchDesktop
SetThreadDesktop
CreateDesktopA
OpenDesktopA
SetProcessWindowStation
OpenWindowStationA
GetThreadDesktop
GetProcessWindowStation
SetRect
GetSystemMetrics
GetCursorPos
CreateCompatibleBitmap
GetDIBits
BitBlt
DeleteObject
CreateCompatibleDC
CreateDIBSection
DeleteDC
SelectObject
RegQueryValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
SHGetFileInfoW
OleRun
CoCreateInstance
CoInitialize
CoUninitialize
VariantClear
SysAllocString
SysFreeString
GetErrorInfo
PathFileExistsW
StrStrIA
PathFileExistsA
StrStrIW
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?_Split@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?_Refcnt@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEAAEPBG@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_Xran@std@@YAXXZ
WSACleanup
WSAStartup
htonl
bind
sendto
recv
htons
connect
select
inet_ntoa
inet_addr
gethostname
ioctlsocket
closesocket
socket
gethostbyname
send
srand
rand
_wsplitpath
_beginthreadex
wcslen
atoi
??2@YAPAXI@Z
strrchr
malloc
wcsrchr
_itoa
strncat
strstr
free
wcsncmp
strtol
memmove
sscanf
_CxxThrowException
_wtoi
wcsncpy
wcscpy
time
_purecall
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
_wcsicmp
__CxxFrameHandler
MakeSureDirectoryPathExists
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
DeleteUrlCacheEntry
CoGetComCatalog
GetRPCSSInfo
ServiceMain
WhichService
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ