CoGetComCatalog
GetRPCSSInfo
ServiceMain
WhichService
Static task
static1
Behavioral task
behavioral1
Sample
76435135bbcfd64bd697cd96a2df6cd9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
76435135bbcfd64bd697cd96a2df6cd9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
76435135bbcfd64bd697cd96a2df6cd9_JaffaCakes118
Size
88KB
MD5
76435135bbcfd64bd697cd96a2df6cd9
SHA1
853b8876f8e4e24a28dc4ee05577b19f99c432f2
SHA256
a536588ef5e981ea4f68354997a4370c0e3ee5b79447ab1d2cfe390b32361504
SHA512
35e3e08d2f6fd53ca86be57df81f7fe7545007ff19addf331267587925e2e94a7cbbfda158332b6d2d67d02ccea1f036d512db0c5098e4136488f24dd0997da2
SSDEEP
1536:Sf1kZe6V/U9sDTHsRZx5hBQqJ5f+VZYZFvl9mtMOYIOvPToBg:Sf1ON/jTohBQqf+VZYXvl9mtwvPToBg
Checks for missing Authenticode signature.
resource |
---|
76435135bbcfd64bd697cd96a2df6cd9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
WriteFile
DisconnectNamedPipe
TerminateProcess
WaitForSingleObject
CreateProcessA
GetStartupInfoA
CreatePipe
LocalFree
ReadFile
LocalAlloc
PeekNamedPipe
InterlockedIncrement
InterlockedDecrement
WinExec
GetLastError
CreateMutexA
CreateFileW
SetFilePointer
SetEndOfFile
UnmapViewOfFile
FindClose
FindNextFileW
lstrcmpW
FindFirstFileW
GetFileSize
MapViewOfFile
CreateFileMappingA
GetDiskFreeSpaceExW
GetVolumeInformationW
lstrcpyW
lstrlenW
GetLogicalDriveStringsW
LocalReAlloc
GetModuleFileNameA
GetProcAddress
GetDriveTypeW
CreateRemoteThread
GetVersionExA
GetSystemDirectoryA
CreateFileA
LoadLibraryA
MultiByteToWideChar
OpenProcess
GetCurrentProcessId
VirtualFreeEx
VirtualAllocEx
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
FreeLibrary
GetCurrentThread
WideCharToMultiByte
lstrcpyA
lstrcatA
SetFileTime
GetFileTime
VirtualProtect
WritePrivateProfileStringA
GetPrivateProfileStringA
GetTempPathA
GetCommandLineA
DeleteFileA
CloseHandle
AllocConsole
FreeConsole
CopyFileA
Sleep
GetTickCount
MoveFileExA
DeleteFileW
GetModuleHandleA
wsprintfA
wsprintfW
SwitchDesktop
SetThreadDesktop
CreateDesktopA
OpenDesktopA
RegCloseKey
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegQueryValueExA
RegOpenKeyA
SHGetFileInfoW
OleRun
CoUninitialize
CoInitialize
CoCreateInstance
SysAllocString
GetErrorInfo
SysFreeString
VariantClear
StrStrIW
PathFileExistsW
PathFileExistsA
StrStrIA
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?_Xran@std@@YAXXZ
?_Split@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
connect
select
recv
send
WSACleanup
ioctlsocket
htons
socket
bind
gethostname
gethostbyname
htonl
closesocket
WSAStartup
sendto
inet_ntoa
time
srand
__dllonexit
wcscpy
wcsncpy
_wtoi
_CxxThrowException
malloc
strrchr
??2@YAPAXI@Z
_wcsicmp
atoi
__CxxFrameHandler
_beginthreadex
_wsplitpath
rand
wcslen
wcsrchr
_itoa
strncat
strstr
free
wcsncmp
_purecall
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
memmove
MakeSureDirectoryPathExists
DeleteUrlCacheEntry
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
CoGetComCatalog
GetRPCSSInfo
ServiceMain
WhichService
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ