ServiceMain
aaaaaaaaaaaa
bbbbbbbbbbbb
cccccccccccc
zzzzzzzzzzzzz
Static task
static1
Behavioral task
behavioral1
Sample
5d1ffe5168315e180cf1993bfa532ab7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5d1ffe5168315e180cf1993bfa532ab7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5d1ffe5168315e180cf1993bfa532ab7_JaffaCakes118
Size
88KB
MD5
5d1ffe5168315e180cf1993bfa532ab7
SHA1
6db5645ca682ebf3cfd32a0b3cf7b64e107211f9
SHA256
1b21ec787f30c6f1da5dbd6b876b289c2fe288f51de5b1a2172630f773768622
SHA512
67070985608cbb4c0c8a82576ce9063c5cdfb944b0785d77706b6c68ccbb1acd453cecdbac5fe711bac2629d86320f895a7def486ba8ff004c70e1276261270f
SSDEEP
1536:Ho9fhHSfvgx3oeOZS0Mf9IOEnToIftcXWHZVeWJOt:Hyfhygx3JOs02oTBftcXWHZVeWAt
Checks for missing Authenticode signature.
resource |
---|
5d1ffe5168315e180cf1993bfa532ab7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetErrorMode
GetVersionExA
LocalAlloc
ReadFile
WriteFile
MoveFileA
MoveFileExA
DeleteFileA
CreateEventA
GetTickCount
SleepEx
ExitThread
FreeLibrary
lstrcpyA
lstrlenA
Sleep
ResetEvent
GetProcAddress
WaitForSingleObject
CloseHandle
LoadLibraryA
RegEnumKeyExA
RegEnumValueA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
CloseServiceHandle
DeleteService
ControlService
QueryServiceStatus
OpenServiceA
OpenSCManagerA
RegDeleteKeyA
SHDeleteKeyA
_adjust_fdiv
_strnicmp
??3@YAXPAX@Z
memmove
ceil
_ftol
strstr
__CxxFrameHandler
??2@YAPAXI@Z
_CxxThrowException
_except_handler3
strncpy
strrchr
malloc
strtok
strncat
strchr
realloc
atoi
wcstombs
_beginthreadex
free
??1type_info@@UAE@XZ
_initterm
_strcmpi
WSAIoctl
setsockopt
connect
htons
gethostbyname
socket
recv
select
WSACleanup
send
inet_addr
gethostname
sendto
WSASocketA
inet_ntoa
getsockname
WSAStartup
closesocket
ServiceMain
aaaaaaaaaaaa
bbbbbbbbbbbb
cccccccccccc
zzzzzzzzzzzzz
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ