HaHaInstall
HaHaUninstall
Install
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
64da964dedf7f07ddbf4a690f5c5af17_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
64da964dedf7f07ddbf4a690f5c5af17_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
64da964dedf7f07ddbf4a690f5c5af17_JaffaCakes118
Size
26KB
MD5
64da964dedf7f07ddbf4a690f5c5af17
SHA1
1048a14950ca9b8f920da5a9186a9f78986276bc
SHA256
1154b3c15d91f94efcd4655b798eca5419c363499257cc44e88887c6c100a6c7
SHA512
ad8097f7cbcbe4e4ce3908d22ce07ebcba4ebc9ebec6e85d27f37f3f1235d1926d5a81116b4117c86608c47a9ebb3e9af3d72aeb2b1affd73f658097a2511d2f
SSDEEP
768:oEvduqcO23zk91YNNZn5Y9moi0K+++++++++++d/++++3++X+++++++++IN3yq:o+c5z+WZO9moi0K+++++++++++d/+++L
Checks for missing Authenticode signature.
resource |
---|
64da964dedf7f07ddbf4a690f5c5af17_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetComputerNameA
InterlockedExchange
GetVersionExA
GetCurrentProcessId
GlobalMemoryStatusEx
FreeConsole
MoveFileExA
WinExec
lstrcpynA
GetModuleFileNameA
CreateThread
WaitForSingleObject
lstrcmpiA
CloseHandle
SetLastError
Sleep
GetLastError
lstrlenA
lstrcpyA
CreateProcessA
LoadLibraryA
GetProcAddress
FreeLibrary
GetCurrentProcess
GetTickCount
wsprintfA
ExitWindowsEx
ControlService
StartServiceA
QueryServiceStatus
CloseServiceHandle
RegOpenKeyExA
RegQueryValueA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenServiceA
OpenSCManagerA
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
RegOpenKeyA
CreateServiceA
DeleteService
RegisterServiceCtrlHandlerA
SetServiceStatus
ChangeServiceConfigA
malloc
_adjust_fdiv
_initterm
free
_onexit
__dllonexit
??1type_info@@UAE@XZ
_strlwr
sprintf
srand
rand
strncpy
??2@YAPAXI@Z
strstr
_except_handler3
__CxxFrameHandler
_CxxThrowException
strchr
??3@YAXPAX@Z
atoi
strcspn
wcstombs
_ui64toa
SHDeleteKeyA
setsockopt
WSAIoctl
recv
gethostbyname
inet_addr
WSAStartup
shutdown
closesocket
connect
socket
htons
sendto
htonl
WSASocketA
send
HaHaInstall
HaHaUninstall
Install
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ