ServiceMain
install
uninstall
Static task
static1
Behavioral task
behavioral1
Sample
46c36c11238100e155f6d418332869ea_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
46c36c11238100e155f6d418332869ea_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
46c36c11238100e155f6d418332869ea_JaffaCakes118
Size
18KB
MD5
46c36c11238100e155f6d418332869ea
SHA1
32d39631ab8172c905baadc84d4c12bc3d34d169
SHA256
23e687a00f3cf28d58a7d4c0476c3d6c4b0c1eff82286b412164f2798caec1ff
SHA512
68f008e3f04b92f38ace4efa67abedbbb73d1730b467086573a6cea7c6c70e34759db60f119045b39818910d1903680fca74a7ed43f7bd38fb612c4a38f6a3df
SSDEEP
384:WvvhQsw6uL/DM3p0PyiKajSxLGuJxyjWe8EcWA/Y:YvhQsruHMAyiKKSFTywEC/Y
Checks for missing Authenticode signature.
resource |
---|
46c36c11238100e155f6d418332869ea_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetExitCodeProcess
CreateProcessA
GetFileAttributesA
GetSystemDirectoryA
ExpandEnvironmentStringsA
SetStdHandle
GetVolumeInformationA
GetDriveTypeA
lstrcatA
PeekNamedPipe
Process32Next
Process32First
CreateToolhelp32Snapshot
OpenProcess
WriteFile
GetFileSize
GetModuleFileNameA
TerminateThread
ReadFile
GetConsoleDisplayMode
AllocConsole
CreateFileA
WriteConsoleInputA
GetComputerNameA
Sleep
CreatePipe
GetWindowsDirectoryA
SetCurrentDirectoryA
CreateThread
WaitForSingleObject
CloseHandle
TerminateProcess
GetLogicalDrives
GetLastError
_adjust_fdiv
malloc
_initterm
free
wcstombs
atol
strrchr
sscanf
__CxxFrameHandler
_strcmpi
atoi
sprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
InternetReadFile
HttpSendRequestA
InternetQueryOptionA
InternetCloseHandle
InternetSetOptionA
InternetConnectA
HttpOpenRequestA
HttpAddRequestHeadersA
InternetOpenA
StartServiceA
SetServiceStatus
RegisterServiceCtrlHandlerA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
OpenProcessToken
CreateProcessAsUserA
CloseServiceHandle
EnumServicesStatusExA
OpenSCManagerA
ControlService
OpenServiceA
URLDownloadToFileA
GetUserNameExA
ServiceMain
install
uninstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ