CoGetComCatalog
GetRPCSSInfo
INS
ServiceMain
WhichService
Static task
static1
Behavioral task
behavioral1
Sample
6907f4b64ceedffa8dc1355b5f20649a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6907f4b64ceedffa8dc1355b5f20649a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6907f4b64ceedffa8dc1355b5f20649a_JaffaCakes118
Size
28KB
MD5
6907f4b64ceedffa8dc1355b5f20649a
SHA1
f0c96c96656b37b56638e832dd029cbc783070ec
SHA256
0ea1e3d7684c520039876f265c8ad34e9877e985ebb7c20aa9adf296dbce1b43
SHA512
d9a4171e4955c9ef90da0f46caa7fc09dbe8ec98f828e72b1be1cc8e38f30eb8408d071f1b028dcaba409212e026b0019d0a540fdedaa75f671bcb24f9ca2e0a
SSDEEP
384:NyivlGZgUiXQPd+YDVvexdr2fMT5kE5I4K:NbdGOUi4dnvff059hK
Checks for missing Authenticode signature.
resource |
---|
6907f4b64ceedffa8dc1355b5f20649a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
WaitForSingleObject
WriteFile
CreateFileA
LoadResource
SizeofResource
FindResourceA
lstrlenA
GetSystemDirectoryA
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
OpenProcess
GetCurrentProcessId
VirtualFreeEx
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
FindClose
CreateMutexA
lstrcpynA
lstrcpyA
lstrcmpA
FindFirstFileA
SetFileTime
GetFileTime
CreateThread
ReleaseMutex
FreeLibrary
CreateEventA
GetLastError
SetEvent
CloseHandle
DeleteFileA
Sleep
CopyFileA
FindNextFileA
GetModuleFileNameA
UnhookWindowsHookEx
SendMessageA
EnumWindows
GetWindowThreadProcessId
wsprintfA
SetWindowsHookExA
CallNextHookEx
RegisterWindowMessageA
RegSetValueExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
PathFileExistsA
StrStrIA
CoGetComCatalog
GetRPCSSInfo
INS
ServiceMain
WhichService
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ