ServiceMain
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_DllMain@12
Static task
static1
Behavioral task
behavioral1
Sample
4c02baf1c64b3f91ffdf848a9c217061_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4c02baf1c64b3f91ffdf848a9c217061_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4c02baf1c64b3f91ffdf848a9c217061_JaffaCakes118
Size
156KB
MD5
4c02baf1c64b3f91ffdf848a9c217061
SHA1
36fdd964f394bcbac68e4fc8c68a6fd92fc8c873
SHA256
ee61a9574311cbbc086fa910f88f642c43f8760fb02ccdb37bf8ba9bce5fe774
SHA512
e9600e11cb76f6c40ed30a03c0d0591c111a7d0bb48321b341e03df0448feb5327158c536487bbe6d39c4e4c108aa13b9a0dffac59ec97ac6410e5659edd6e9d
SSDEEP
3072:B1QXuXdOUzTEpsm+kOc2UkWN0mKTItwXEOpRzcyho7Af/jhUD9QTUtNL+I9j:BqetOUIh+k+5WNCIKEExNoctUaAH
Checks for missing Authenticode signature.
resource |
---|
4c02baf1c64b3f91ffdf848a9c217061_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord823
ord825
realloc
memmove
malloc
free
_wasctime
wcslen
wcscpy
strncat
wcsncpy
_stat
__CxxFrameHandler
_initterm
_adjust_fdiv
??1type_info@@UAE@XZ
__dllonexit
_onexit
?terminate@@YAXXZ
_itoa
_stricmp
_strdup
strncmp
calloc
time
localtime
_timezone
sprintf
vsprintf
atoi
_except_handler3
GetLastError
WriteFile
DeviceIoControl
VirtualAlloc
QueryPerformanceCounter
SetThreadPriority
VirtualProtect
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameA
CreateFileA
CloseHandle
ReadFile
OutputDebugStringA
lstrlenA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
Sleep
QueryPerformanceFrequency
RegSetValueExA
RegCloseKey
RegCreateKeyA
RegOpenKeyA
RegDeleteKeyA
RegSetValueA
CoUninitialize
CoTaskMemAlloc
CoInitialize
UuidToStringA
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
timeGetTime
ServiceMain
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_DllMain@12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ