CoGetComCatalog
GetRPCSSInfo
ServiceMain
WhichService
_f5@16
f5
Static task
static1
Behavioral task
behavioral1
Sample
668894b9ee250e72a286816d6524ea51_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
668894b9ee250e72a286816d6524ea51_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
668894b9ee250e72a286816d6524ea51_JaffaCakes118
Size
45KB
MD5
668894b9ee250e72a286816d6524ea51
SHA1
9c3f57c1e08de4e2175a8fad6d1f5ab52cd68d04
SHA256
9fe8fd4247c90d24db8d522e4520d4e47ab3de9f4ca30f55c992428b33f9fe61
SHA512
72faf326a55ea9ef7f5607cd31d7dda29f8a6deae36d837a937c3167ae4fe9c8c43635e2a83918f8b7edaa4ab1e254a5d721b21e178fa10276dc3debe7145b75
SSDEEP
768:s8xs8KUi2wBYjMNfuNEBntHsHLzMiBNCvDe:s8mUlwZfvBntHgLzhBNQ
Checks for missing Authenticode signature.
resource |
---|
668894b9ee250e72a286816d6524ea51_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WaitForSingleObject
WriteFile
CreateFileA
LoadResource
SizeofResource
FindResourceA
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
GetSystemDirectoryA
OpenProcess
GetCurrentProcessId
VirtualFreeEx
WriteProcessMemory
VirtualAllocEx
FindClose
FindNextFileA
lstrcpynA
lstrcpyA
ReleaseMutex
FindFirstFileA
MultiByteToWideChar
RtlZeroMemory
CreateMutexA
SetFileTime
GetFileTime
lstrcatA
GetModuleHandleA
FreeLibrary
CreateEventA
GetLastError
SetEvent
CloseHandle
Sleep
CopyFileA
DeleteFileA
MoveFileExA
LoadLibraryA
GetProcAddress
CreateThread
lstrlenA
GetModuleFileNameA
lstrcmpA
DisableThreadLibraryCalls
wsprintfA
RegOpenKeyA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegSetValueExA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
StrStrA
PathFileExistsA
strncat
CoGetComCatalog
GetRPCSSInfo
ServiceMain
WhichService
_f5@16
f5
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ