InstallService
ServiceMain
UninstallService
installA
uninstallA
Static task
static1
Behavioral task
behavioral1
Sample
66c287675cd4c7172590f71181e723a8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
66c287675cd4c7172590f71181e723a8_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
66c287675cd4c7172590f71181e723a8_JaffaCakes118
Size
32KB
MD5
66c287675cd4c7172590f71181e723a8
SHA1
30ce5bd66a8e62aa7727087cc6dcfa04f4495b66
SHA256
3e49de7fbfb33c3ae715f948cf1f65d1eae5f4527c2b423be886fe7194fc5c34
SHA512
84a6610df5d3910c7b97bec489efd07ebdbd295ede642c4692c3369815be9781f386598996ce3c3208a7b6924baded5036d7b71a42a516f26bf35b1c1fed61ba
SSDEEP
384:z02T48n9PvyaP84a+WbzajBHiXnei/XX6+NjbPJd39OJCYW19:RT4e9PvTpa+WHXOe6WjTJB9OJCX
Checks for missing Authenticode signature.
resource |
---|
66c287675cd4c7172590f71181e723a8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetLongPathNameA
GetTempPathA
CreateFileA
SetLastError
OutputDebugStringA
FindResourceA
LoadResource
SizeofResource
WriteFile
CreateToolhelp32Snapshot
Process32First
Process32Next
OpenProcess
GetModuleFileNameA
lstrcatA
GetLastError
CloseHandle
Sleep
lstrlenA
OpenSCManagerA
DeleteService
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
CreateServiceA
CloseServiceHandle
RegCreateKeyA
RegSetValueExA
OpenProcessToken
CreateProcessAsUserA
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenServiceA
strchr
_adjust_fdiv
malloc
memset
wcstombs
strncpy
printf
strcat
strlen
strncat
_stricmp
__CxxFrameHandler
_EH_prolog
_CxxThrowException
_except_handler3
??3@YAXPAX@Z
??1type_info@@UAE@XZ
free
_initterm
InstallService
ServiceMain
UninstallService
installA
uninstallA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ