ServiceMain
_SvcCtrlFnct@4
Static task
static1
Behavioral task
behavioral1
Sample
59e548bc0571bb486a8bf93dbea260e1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
59e548bc0571bb486a8bf93dbea260e1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
59e548bc0571bb486a8bf93dbea260e1_JaffaCakes118
Size
6KB
MD5
59e548bc0571bb486a8bf93dbea260e1
SHA1
20f276608951e87fe685c6fe14ee37024b25f4da
SHA256
25c6f1135ff82235214eb8bd87e8952f48ee3aa6583290c25586ee958aa59fa9
SHA512
6dba3f936cca92e1c6a9713eea3c15379e19199478194f563596f100936db8c5853116c7fba0e1c6ee795dae6e5893032e9e9c84451cb632036daefcdb7b889b
SSDEEP
96:ATS2N+ZQaWfNsClC56i0kSn5LnOMIMELmdAqSFofSM+cHd:AeZQaAfC56i0kS5gMfAqSFXM7
Checks for missing Authenticode signature.
resource |
---|
59e548bc0571bb486a8bf93dbea260e1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord537
ord800
ord825
ord1575
ord1182
ord823
ord342
ord1253
ord1168
_adjust_fdiv
__CxxFrameHandler
sprintf
strcat
free
_initterm
malloc
GetModuleHandleA
GetCommandLineA
Sleep
CreateThread
OutputDebugStringA
GetSystemWindowsDirectoryA
GetTempFileNameA
CreateProcessA
CloseHandle
GetLastError
GetCurrentProcess
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
DeleteFileA
GetProcessWindowStation
OpenWindowStationA
SetProcessWindowStation
CloseWindowStation
AdjustTokenPrivileges
OpenProcessToken
SetServiceStatus
RegisterServiceCtrlHandlerExA
LookupPrivilegeValueA
URLDownloadToFileA
ServiceMain
_SvcCtrlFnct@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ