CoGetComCatalog
GetRPCSSInfo
INS
ServiceMain
WhichService
Static task
static1
Behavioral task
behavioral1
Sample
4309413ed8d259fd46da1ef7d8ecdd74_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4309413ed8d259fd46da1ef7d8ecdd74_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4309413ed8d259fd46da1ef7d8ecdd74_JaffaCakes118
Size
24KB
MD5
4309413ed8d259fd46da1ef7d8ecdd74
SHA1
4f34e816d259333455d88ec4fa8bbabcf3d8e96d
SHA256
ee0e9a4fa21ba87df760e3113156b636ccdea603f45e68fba3b8201a07788264
SHA512
0df9b4b98d2754ff49683a0ec39061fe326505132f41d2f2be66475f2594db5b16fdd39ce200164c919b9910986af423ebab2850749b0956c4f0c7bf79e3b20b
SSDEEP
384:BuCippFiUEAutfcrUi2x7VEnRKTQd04NJBN2DDg1:Mbshf0Ui2IRKTi0uB8DA
Checks for missing Authenticode signature.
resource |
---|
4309413ed8d259fd46da1ef7d8ecdd74_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WriteFile
CreateFileA
LoadResource
SizeofResource
FindResourceA
lstrlenA
GetSystemDirectoryA
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
OpenProcess
GetCurrentProcessId
VirtualFreeEx
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
FindClose
FindNextFileA
lstrcpynA
lstrcpyA
FindFirstFileA
MultiByteToWideChar
SetFileTime
GetFileTime
WaitForSingleObject
CreateMutexA
CreateThread
ReleaseMutex
FreeLibrary
CreateEventA
GetLastError
SetEvent
CloseHandle
Sleep
CopyFileA
DeleteFileA
MoveFileExA
LoadLibraryA
GetProcAddress
lstrcmpA
GetModuleFileNameA
wsprintfA
LookupPrivilegeValueA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegOpenKeyA
RegSetValueExA
RegOpenKeyExA
AdjustTokenPrivileges
OpenProcessToken
StrStrIA
PathFileExistsA
memset
CoGetComCatalog
GetRPCSSInfo
INS
ServiceMain
WhichService
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ