Install
Launch
ServiceMain
UnInstall
Static task
static1
Behavioral task
behavioral1
Sample
6580e672bcbdfefd95a84f1e44d4f807_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6580e672bcbdfefd95a84f1e44d4f807_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6580e672bcbdfefd95a84f1e44d4f807_JaffaCakes118
Size
356KB
MD5
6580e672bcbdfefd95a84f1e44d4f807
SHA1
d58071d94d1733cc19cc2bb8e4286f48e5742af4
SHA256
32fa87d1dec64249c07e2d61d2235ee0cdac6a10735f4944e2f1dafd423cab93
SHA512
21fbaa9bcfc4d8fcd96224a16070303a89a3c57e4c07c9eb29183c379b27967cd7672d310e23d03c528d4c3baf17bf5ff4133f1413e0d2a28ce2ff0fe296b25f
SSDEEP
6144:JQUx9eSkZMsxYO/+ap4FicZwd4O0q3DczfHIcZPgsYVGi8h4qEUE/FbNv2t:JtPeSkZMV9aCNo4OdQjI0PrYVGLEU0NG
Checks for missing Authenticode signature.
resource |
---|
6580e672bcbdfefd95a84f1e44d4f807_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
inet_ntoa
InternetOpenW
StrCmpIW
ImmGetCompositionStringW
mixerSetControlDetails
GetModuleFileNameExW
CreateEnvironmentBlock
GetModuleHandleA
GetModuleHandleA
GetProcAddress
VirtualProtect
GetKeyNameTextW
BitBlt
CreateServiceW
SHChangeNotify
CoInitialize
SysFreeString
Install
Launch
ServiceMain
UnInstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ